{
  "type": "bundle",
  "id": "bundle--56da374c-f223-5a39-a92b-54ed81861ad4",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "Applied Cybernetics Group",
      "identity_class": "organization"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d520a98a-8d5a-50ef-ac70-78a14418a242",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vozzijig.site-shartbandi-pasor.online/6081ffcc-679c-4b34-92ec-98a6547d01cf",
      "pattern": "[url:value = 'https://vozzijig.site-shartbandi-pasor.online/6081ffcc-679c-4b34-92ec-98a6547d01cf']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:23:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a5c6459-ce18-5146-9b03-e4944febaf6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.31.247:56618/i",
      "pattern": "[url:value = 'http://182.113.31.247:56618/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:20:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--481f3b7a-f9f0-5a4e-9cd0-db7db785bcb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drij.bahsegel90.com/9f9d8bbf-a171-46f5-aa44-d9cf8ab3f8cc",
      "pattern": "[url:value = 'https://drij.bahsegel90.com/9f9d8bbf-a171-46f5-aa44-d9cf8ab3f8cc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:18:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddac8651-eaf7-50d1-848c-b12a9f2917c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.1.200:35611/bin.sh",
      "pattern": "[url:value = 'http://110.36.1.200:35611/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:15:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3bf34a7-ffcc-5b74-8419-4b9146b853f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.172.247.123/227/ecs/givemesomethingsgood.hta",
      "pattern": "[url:value = 'http://107.172.247.123/227/ecs/givemesomethingsgood.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e481aa0-2089-5095-ab32-bcf2f79717ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.227.77/240/ecw/weneedbestthingsfromthegreatpeoplesaroundtheglobalcoing.hta",
      "pattern": "[url:value = 'http://107.173.227.77/240/ecw/weneedbestthingsfromthegreatpeoplesaroundtheglobalcoing.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3adbf5fd-58d5-551f-98e4-763774ec94a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.227.83/225/ecv/wegivingsomethingbiggerthingswithmebetterforme.hta",
      "pattern": "[url:value = 'http://107.173.227.83/225/ecv/wegivingsomethingbiggerthingswithmebetterforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:09:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fb4f839-f4ef-542e-9c03-c78bf3f9a433",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.116.236.163/38/goodthinkgsforbetterwayscoming.hta",
      "pattern": "[url:value = 'http://194.116.236.163/38/goodthinkgsforbetterwayscoming.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:09:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ca21e81-efe7-5010-be24-a22a3a2c683f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.54.101.188/144/cve/goodwayforbestattendingthingsforme.hta",
      "pattern": "[url:value = 'http://209.54.101.188/144/cve/goodwayforbestattendingthingsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:08:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b4135c2-1794-5e6d-aa13-dd5e3f01827d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.1.227.114:56696/bin.sh",
      "pattern": "[url:value = 'http://221.1.227.114:56696/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:06:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0082d474-2039-59e3-a4e1-9ace103ab671",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.31.247:56618/bin.sh",
      "pattern": "[url:value = 'http://182.113.31.247:56618/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:05:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--130cf8ee-3dda-528d-b410-2190987041fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xevzora.cfd/2day/secured_stub.ps1",
      "pattern": "[url:value = 'https://xevzora.cfd/2day/secured_stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:03:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b742dad6-e403-54d3-b841-07a97049b410",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fnexayyt.site-shartbandi-khareji.com/5b911a94-51f9-4132-b048-4dcded9ce8d6",
      "pattern": "[url:value = 'https://fnexayyt.site-shartbandi-khareji.com/5b911a94-51f9-4132-b048-4dcded9ce8d6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T09:00:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a56c32b1-0c90-5907-ab0d-de31a3a5142f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.114.199.68:41869/i",
      "pattern": "[url:value = 'http://182.114.199.68:41869/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:59:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08ddc55a-7764-5e38-9d3a-46941eb7e3b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.227.99/400/kissedbyprincesssheisbeatufifyl.hta",
      "pattern": "[url:value = 'http://107.173.227.99/400/kissedbyprincesssheisbeatufifyl.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:59:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--660c0dd0-f342-5cab-8531-8d5dcf67e3d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://203.202.232.187/44/weneedbestcreativeideasforbetterplacestocomeback.hta",
      "pattern": "[url:value = 'http://203.202.232.187/44/weneedbestcreativeideasforbetterplacestocomeback.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:58:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdb4d9ba-43a0-5085-b70a-41f4873d97c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.70.168/img/img_102209.png",
      "pattern": "[url:value = 'http://104.168.70.168/img/img_102209.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:57:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28b4e4b6-0a84-5d1e-8ec9-dff0685b785f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://203.202.232.187/img/img_052226.png",
      "pattern": "[url:value = 'http://203.202.232.187/img/img_052226.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:57:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cc304b7-0909-5d5c-b457-243a3449a138",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ntegm9h9.varzeshlife.ir/?ublib=54a92e45-cae8-40a2-b1f4-de03b632c7bd",
      "pattern": "[url:value = 'https://ntegm9h9.varzeshlife.ir/?ublib=54a92e45-cae8-40a2-b1f4-de03b632c7bd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:56:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82eefd8c-0354-51a2-b723-0d3dae006f81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://172.245.195.209/90/wegivenbestwishesinsideforme.hta",
      "pattern": "[url:value = 'http://172.245.195.209/90/wegivenbestwishesinsideforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:56:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d74b818b-6ec9-5db0-b543-f7cf74aaa519",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://204.44.69.210/40/globalnetworkingkingsonhereforbetter.hta",
      "pattern": "[url:value = 'http://204.44.69.210/40/globalnetworkingkingsonhereforbetter.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:55:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc921cad-3a25-5d77-899e-6a9ae29924cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.175.202.168/shell/secured_stub.ps1",
      "pattern": "[url:value = 'http://107.175.202.168/shell/secured_stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4096a4c-6938-5adc-b89b-357a2571e759",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://204.44.69.210/40/img_044544.png",
      "pattern": "[url:value = 'http://204.44.69.210/40/img_044544.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:54:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6e8f374-1975-5434-afba-70480f1cffed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qhy0wolx.casinomhub.bet/?ublib=f390ed84-2040-4b46-9cdb-f22234bb7fc9",
      "pattern": "[url:value = 'https://qhy0wolx.casinomhub.bet/?ublib=f390ed84-2040-4b46-9cdb-f22234bb7fc9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d648bc3-db5f-5b49-8c6d-92bbcc5b6c4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://198.23.144.23/130/goodthingsarecomingformylifenotyoursitscomig.vbe",
      "pattern": "[url:value = 'http://198.23.144.23/130/goodthingsarecomingformylifenotyoursitscomig.vbe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:54:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6be37979-e34b-54de-bf63-183ee3c914bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nwp4ut5h.madgal.life/?ublib=e194d45d-73d2-4185-af8a-5b82cc5903d1",
      "pattern": "[url:value = 'https://nwp4ut5h.madgal.life/?ublib=e194d45d-73d2-4185-af8a-5b82cc5903d1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:53:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54ee274b-0434-5133-97af-ec09ffee4938",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.255.195.146/25/img_191645.png",
      "pattern": "[url:value = 'http://192.255.195.146/25/img_191645.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:44:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e4564de-f2cf-55d2-91c6-b09f063904d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.255.195.146/25/goodperfromacenforbestthignsforme.hta",
      "pattern": "[url:value = 'http://192.255.195.146/25/goodperfromacenforbestthignsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:44:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec0b9c7f-fa73-5f5a-b1b3-bc92a5036263",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://144.172.109.153/1234/secured_stub.ps1",
      "pattern": "[url:value = 'http://144.172.109.153/1234/secured_stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:43:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--073ae9fb-ed4d-5eb7-a2e5-402c7f8edd02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://144.172.109.153/60/amazingthingsarenextlevelthingsaregoingtobe.vbe",
      "pattern": "[url:value = 'http://144.172.109.153/60/amazingthingsarenextlevelthingsaregoingtobe.vbe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:43:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26322d7d-759d-5c59-a0f0-0d2e5609757a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://144.172.109.153/60/cbb/weneedsuchakingdomofnicepersonentirelinkingforebst.hta",
      "pattern": "[url:value = 'http://144.172.109.153/60/cbb/weneedsuchakingdomofnicepersonentirelinkingforebst.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:43:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98436587-a9fb-5ee2-9d17-956765f030a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.195:35411/i",
      "pattern": "[url:value = 'http://200.112.129.195:35411/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:41:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff89f0e2-b17b-5be8-9bd6-886bc577ce19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.229.172.95:56226/i",
      "pattern": "[url:value = 'http://42.229.172.95:56226/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:24:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9096c9a-e6fc-5fd1-b445-f6ba7f96f7e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.229.172.95:56226/bin.sh",
      "pattern": "[url:value = 'http://42.229.172.95:56226/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:21:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9c35b63-fda3-53a4-8d01-f69f02f9034c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.124.209.59:41906/bin.sh",
      "pattern": "[url:value = 'http://182.124.209.59:41906/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:21:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc90f4f4-20ec-567c-aec0-7d41f7bd4736",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.0.237:49157/i",
      "pattern": "[url:value = 'http://222.137.0.237:49157/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:21:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--beb92b6d-da4e-562a-bb5c-04bed576a579",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gksn.bahigo90bet.com/b95e4343-fe35-4ace-b529-b1e660b824e3",
      "pattern": "[url:value = 'https://gksn.bahigo90bet.com/b95e4343-fe35-4ace-b529-b1e660b824e3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:17:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b84c061-c253-5b02-8436-b65abe93cf50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.70.168/img/im/MSI_PRO.png",
      "pattern": "[url:value = 'http://104.168.70.168/img/im/MSI_PRO.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:13:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c529b72e-e369-5d29-8296-ce735ed90107",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.116.236.163/img/img_184307.png",
      "pattern": "[url:value = 'http://194.116.236.163/img/img_184307.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:13:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a17cae15-1d2e-5e63-a60d-3c94a96bea0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.116.236.163/37/newkingisbackgorbesttreatmentsneedforallthismethodsforfind.hta",
      "pattern": "[url:value = 'http://194.116.236.163/37/newkingisbackgorbesttreatmentsneedforallthismethodsforfind.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:13:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a65fdf8-9a8b-571d-b24c-d18d124f0174",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.54.101.188/145/goodness.js",
      "pattern": "[url:value = 'http://209.54.101.188/145/goodness.js']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:12:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--060437af-5651-5396-82f7-26ac90e34bf2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.54.101.188/145/nc/scc.hta",
      "pattern": "[url:value = 'http://209.54.101.188/145/nc/scc.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:12:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ade0aa92-c9fb-5af4-ab03-b2a8f2bc971a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://183.92.205.84:44151/i",
      "pattern": "[url:value = 'http://183.92.205.84:44151/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:08:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c77c39e8-1a99-5b6d-9e07-d2ba9c6cc65d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.43.144.188:45792/i",
      "pattern": "[url:value = 'http://125.43.144.188:45792/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:05:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81dce942-987b-5887-86e5-26b3bab26e7d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://feulntzw.site-shartbandi-farsi.com/f3acb4ac-7c90-428c-a164-dfb6734fd327",
      "pattern": "[url:value = 'https://feulntzw.site-shartbandi-farsi.com/f3acb4ac-7c90-428c-a164-dfb6734fd327']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:04:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5eb79037-a571-5726-b058-534e0d980cc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.245.84.209:48772/i",
      "pattern": "[url:value = 'http://117.245.84.209:48772/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T08:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3486c47-b6e9-5883-bcd1-53b11a8893d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://183.92.205.84:44151/bin.sh",
      "pattern": "[url:value = 'http://183.92.205.84:44151/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:46:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91d8af31-f7b5-517f-8980-21c076dc374f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.1.227.114:56696/i",
      "pattern": "[url:value = 'http://221.1.227.114:56696/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:46:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b138081-f623-5856-b054-2f34f7dc7de9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://endpoint.project0.cc/f/m/libcommon.so_x86_64",
      "pattern": "[url:value = 'http://endpoint.project0.cc/f/m/libcommon.so_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:45:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3c17269-8443-51d3-a3dc-0c3d41e857a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://endpoint.project0.cc/f/m/.X0-lock_x86_64",
      "pattern": "[url:value = 'http://endpoint.project0.cc/f/m/.X0-lock_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:45:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be550c75-5593-5014-928f-2a2601f59205",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://endpoint.project0.cc/f/init.cfg",
      "pattern": "[url:value = 'http://endpoint.project0.cc/f/init.cfg']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:45:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89635227-aab0-59a4-a182-58f4570f2d73",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.117.156.106:43300/i",
      "pattern": "[url:value = 'http://119.117.156.106:43300/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:43:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e6c7efb-da5c-5ec8-aa52-a11231011614",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.43.144.188:45792/bin.sh",
      "pattern": "[url:value = 'http://125.43.144.188:45792/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:36:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4cabbaf-a5b2-5b3f-9115-c565238f506f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.191.203.156:35202/bin.sh",
      "pattern": "[url:value = 'http://222.191.203.156:35202/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:34:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cbd0392-64a1-56ef-be27-f1202fb19283",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.44.56.240:34717/bin.sh",
      "pattern": "[url:value = 'http://125.44.56.240:34717/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:31:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03bd9b16-80e7-5711-8d5f-19cc7c7cca2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zrul.bahigo90bet.com/763701f2-b6eb-4e01-a48c-57ae58864b9b",
      "pattern": "[url:value = 'https://zrul.bahigo90bet.com/763701f2-b6eb-4e01-a48c-57ae58864b9b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:23:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df424ffa-5b95-5cfb-9836-d9c14e72c8f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.49.20:36149/i",
      "pattern": "[url:value = 'http://110.37.49.20:36149/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:20:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93949840-a58e-5c59-a5eb-89a8c4fd202a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.117.156.106:43300/bin.sh",
      "pattern": "[url:value = 'http://119.117.156.106:43300/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:18:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d649778a-85e6-5091-9211-5b27d0f0c19c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.72.136:50524/i",
      "pattern": "[url:value = 'http://61.52.72.136:50524/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:15:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27545ec9-f8a1-55b9-b979-c0dcf152e08f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zwtocirl.site-shartbandi-farsi.com/9fef95fb-a1ac-4c14-8713-41f950bf3587",
      "pattern": "[url:value = 'https://zwtocirl.site-shartbandi-farsi.com/9fef95fb-a1ac-4c14-8713-41f950bf3587']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:15:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8aa9d0e-9485-5a96-8c02-c33080e3391d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.172.173:34251/i",
      "pattern": "[url:value = 'http://123.5.172.173:34251/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:12:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b28f065-db37-51b5-b481-a1bdf85fc454",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.mpsl",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81456321-06c3-5817-a5b7-d3b23a983021",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.x86",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5225dc20-8f00-592b-872f-3a51771cb038",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.arm6",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9709e132-606b-560b-b8f0-05d92711473e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.i686",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62f81bf1-0bdf-5276-87b7-62e79d8894fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.arm",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a8b9475-6a4f-51b8-b5c4-1ce147947d6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.x86_64",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f878519d-7905-53ac-940d-9b7dce16e8b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.arc",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db562b2f-2d46-529a-b678-27eb1b42d7af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.arm5",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29765d28-8942-5881-864e-1c4d10eb7b7d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.arm7",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26c2e091-2851-5912-8910-9f477bbdaaf8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.sh4",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45a43c09-9136-5b4d-b877-2b560a0c0318",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.sparc",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27c02548-f082-580d-8509-d0109872b243",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.ppc",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ffda3bb-2cdf-5c13-994b-d0b65882a441",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.mips64",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.mips64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886211/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27a29ef7-ca74-55ce-a5f1-9ffe92841495",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.mips",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f498671-7b70-5ef8-b1eb-b0b70d2c855e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/Space.m68k",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/Space.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3306d28a-09f4-51d9-b594-8fc1850e557d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.236.217.68/65/exa/wegivenbestthingsaroundthecglogablforengaaged.hta",
      "pattern": "[url:value = 'http://192.236.217.68/65/exa/wegivenbestthingsaroundthecglogablforengaaged.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:03:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20de0f84-f7a1-59f5-8fb7-0de271e3f55c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.222.145:54243/i",
      "pattern": "[url:value = 'http://182.113.222.145:54243/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:02:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71e3d3f8-14fa-571e-8cd2-7ec7913d189a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-be36e3aeb6404712971f081a2837a8fa.r2.dev/hakuna.png",
      "pattern": "[url:value = 'https://pub-be36e3aeb6404712971f081a2837a8fa.r2.dev/hakuna.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:02:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d8a37b0-740e-588b-8b9b-cb45d56930f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-556e12d7b27c4eefad584f5b94bdff69.r2.dev/lazit.png",
      "pattern": "[url:value = 'https://pub-556e12d7b27c4eefad584f5b94bdff69.r2.dev/lazit.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d69969c9-f7c8-57cb-b23b-8ba9481e38da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-acc3946ba34b4465b2606bf635365817.r2.dev/chivas.png",
      "pattern": "[url:value = 'https://pub-acc3946ba34b4465b2606bf635365817.r2.dev/chivas.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:02:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d6dd6b6-ed76-5bfd-b4fd-dbd35c98be8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.216.4:33318/i",
      "pattern": "[url:value = 'http://115.55.216.4:33318/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T07:01:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b39400e7-dcbd-58ed-bf71-9ae6bd7148a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/1.sh",
      "pattern": "[url:value = 'http://94.154.43.70/1.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--283b8dd0-d195-5b37-bad4-3e851de59c4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.mpsl",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--680b913f-d27e-55d5-8c24-9f433f348dd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.x86_64",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e58f97b-22e2-53a0-aa14-e2eb592dbfb7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.mips",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8df2daf3-0c37-5ab5-b83e-1c93969e1de4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.arm6",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09686d05-4917-5a1a-8811-f7f42b4571a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.ppc",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f22f7c1f-3e64-5460-8cb9-70c1e5bb0ca3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.m68k",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--242678bb-3ba8-5cbd-822f-7c0514ed59df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.x86",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6854fa25-5a82-5f0f-a47c-8e09fc0a7480",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.arm7",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65dcc9e4-fadd-53ca-b92c-0dfc755e36da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.arm5",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67068d09-fb61-523a-8f16-20873e508341",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.i686",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c54728f0-0ca2-5bf2-97ba-9e1a57180985",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.arm",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7ce7f4f-53ea-5718-8a1c-aa929cbc032d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.spc",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4eff69e-34c7-53b8-867f-020750a31cb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.70/hiddenbin/zombie.sh4",
      "pattern": "[url:value = 'http://94.154.43.70/hiddenbin/zombie.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b577199-260a-5d30-abac-cf0dcde60110",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://198.23.144.23/130/euv/givemebestthignswithgreatoptionsforme.hta",
      "pattern": "[url:value = 'http://198.23.144.23/130/euv/givemebestthignswithgreatoptionsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:57:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--163bda84-7a5e-51e4-b081-780b30ee0363",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://17eqwy30.takhtenard.app/?ublib=93e9125e-0384-44f9-b638-0a32e5108951",
      "pattern": "[url:value = 'https://17eqwy30.takhtenard.app/?ublib=93e9125e-0384-44f9-b638-0a32e5108951']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11b79f4e-faf0-585a-bce4-b26ef28572cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_x86_64",
      "pattern": "[url:value = 'http://94.154.43.51/main_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:54:44Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d639ddff-4501-5e62-b514-0bbbbb87b5c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_x86",
      "pattern": "[url:value = 'http://94.154.43.51/main_x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:54:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f08190-b7f7-5989-b676-9a855313c38a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.arm",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b80406e-5309-5ca7-9518-2600ac9469b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_arm",
      "pattern": "[url:value = 'http://94.154.43.51/main_arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebd75526-4219-514f-b531-94cfd9a81df8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_m68k",
      "pattern": "[url:value = 'http://94.154.43.51/main_m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a730d2e-9fd7-5565-ac93-be38ef190369",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_ppc",
      "pattern": "[url:value = 'http://94.154.43.51/main_ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0376833-8de9-5d03-aa18-89e2f113baac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.m68k",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d02a2ee-1464-5eb7-a7c6-bb80269fc254",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.arm5",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c54227d-a69e-535f-be49-4f7d71e79c6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_arm7",
      "pattern": "[url:value = 'http://94.154.43.51/main_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92ff89b5-c9ad-59a1-ac11-a9b5ded8bd05",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.x86",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--124a564c-27d8-5d3d-8d82-a88f04334f9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.spc",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a48f257f-3b2a-5c4e-9090-aae6870a8f5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.arm7",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2285acda-c6d6-534b-baa4-8dd811489f42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.arm6",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41716745-5166-59d2-95fd-d970a04de34d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.sh4",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1f52c9e-5f49-5fc0-bb8a-f6ce065e634e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_mpsl",
      "pattern": "[url:value = 'http://94.154.43.51/main_mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5143be1-f53b-5c9b-b582-30920e8c69b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.mpsl",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb473bbc-4769-50a4-8697-315c0c0f21aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.mips",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46f670a6-4253-50a5-80d4-7a193f1fddd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/dlr.ppc",
      "pattern": "[url:value = 'http://94.154.43.51/dlr.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5e8b36f-3c05-58b3-b5f1-6f05e159269a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_arm6",
      "pattern": "[url:value = 'http://94.154.43.51/main_arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f53923f3-bfa6-58c0-b1f8-86c257a22ce9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_arm5",
      "pattern": "[url:value = 'http://94.154.43.51/main_arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f2a3245-4544-5ba5-aef1-a06f1a2d8c78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_mips",
      "pattern": "[url:value = 'http://94.154.43.51/main_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fa474e6-ebd0-572f-9e05-ddddfb046d39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/debug.dbg",
      "pattern": "[url:value = 'http://94.154.43.51/debug.dbg']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ba9ec20-43f5-5640-ad66-18aed556cb35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/main_sh4",
      "pattern": "[url:value = 'http://94.154.43.51/main_sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:53:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a188a26f-1c76-5fc8-b336-e6c39a7357c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://188.232.76.68:20238/i",
      "pattern": "[url:value = 'http://188.232.76.68:20238/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:52:48Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99c414d7-da43-5f76-b61b-afd04c5dd68e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.155.211.71:55862/i",
      "pattern": "[url:value = 'http://219.155.211.71:55862/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7f66b8b-93e5-562e-9ba4-ab650794475c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/txkjolgzu.arm5",
      "pattern": "[url:value = 'http://94.154.43.88/bins/txkjolgzu.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6f6e1c1-744c-5bef-ae8f-3a06dd66ce78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/nvephtfwk",
      "pattern": "[url:value = 'http://94.154.43.88/bins/nvephtfwk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f197823-813a-5b49-846e-e83334b44469",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/nvwrudmsi",
      "pattern": "[url:value = 'http://94.154.43.88/bins/nvwrudmsi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd2a6c08-214f-5ff5-bc4b-7994f297bddb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/txkjolgzu.arm6",
      "pattern": "[url:value = 'http://94.154.43.88/bins/txkjolgzu.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--779be7a7-d6f5-5ade-9bc3-9528eccc1ae7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/ikydgrvum",
      "pattern": "[url:value = 'http://94.154.43.88/bins/ikydgrvum']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--283376fb-0ac4-5a64-8a30-2953637e90a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/abzutimdw",
      "pattern": "[url:value = 'http://94.154.43.88/bins/abzutimdw']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79a610b3-61de-5a4e-a6e4-01105e14a2c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/lkchngqsu",
      "pattern": "[url:value = 'http://94.154.43.88/bins/lkchngqsu']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--426a45b8-1eef-5d09-99d5-06e0bc520bc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.88/bins/txkjolgzu.arm",
      "pattern": "[url:value = 'http://94.154.43.88/bins/txkjolgzu.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:49:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99d237d2-811e-5bd8-a0e1-b7c175926e90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.72.136:50524/bin.sh",
      "pattern": "[url:value = 'http://61.52.72.136:50524/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:47:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a17f968-8ba3-5564-a7fc-4f49f17cc2e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.3.201:35761/bin.sh",
      "pattern": "[url:value = 'http://110.36.3.201:35761/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:45:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbbdb797-eb5a-564d-9b1d-3aff9f0854e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.239.120.131:39996/i",
      "pattern": "[url:value = 'http://112.239.120.131:39996/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afd989a4-d7ba-56ba-9d4c-e3d26d7eb41f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/main_mpsl",
      "pattern": "[url:value = 'http://94.154.43.73/main_mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8a2210f-096e-5b0d-aa89-8daf9cb91f52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/bot.arm",
      "pattern": "[url:value = 'http://94.154.43.73/bot.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c89e1e59-c2a8-55b0-bf23-abd95f43e0df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/main_arm",
      "pattern": "[url:value = 'http://94.154.43.73/main_arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46d79e42-63d2-587c-8b52-187a6b7ee6cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/main_arm7",
      "pattern": "[url:value = 'http://94.154.43.73/main_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9df5d386-86a4-51e0-93e6-d8c7a0894d8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/main_x64",
      "pattern": "[url:value = 'http://94.154.43.73/main_x64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--272acb1a-d27f-511f-9855-88a71789b610",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/main_aarch64",
      "pattern": "[url:value = 'http://94.154.43.73/main_aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35f4e94a-dacd-5e45-8496-a148b91d790a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/main_mips",
      "pattern": "[url:value = 'http://94.154.43.73/main_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:44:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b37b8cb3-1ff4-5760-816c-a72946344b32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/bot.x86_64",
      "pattern": "[url:value = 'http://94.154.43.73/bot.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:43:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea32cf56-b3cd-521d-98af-cf8e730b1ba1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/bot.mipsel",
      "pattern": "[url:value = 'http://94.154.43.73/bot.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:43:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7821c2a-220f-5916-961f-b5fa70c30439",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/bot.mips",
      "pattern": "[url:value = 'http://94.154.43.73/bot.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:43:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c88e8977-5bdc-5610-a3ad-bab41e1016a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.73/bot.aarch64",
      "pattern": "[url:value = 'http://94.154.43.73/bot.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:43:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b3d84a1-1d4e-5e1e-8cfe-3e09c9ec1539",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.222.145:54243/bin.sh",
      "pattern": "[url:value = 'http://182.113.222.145:54243/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:39:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ad8bf96-384f-5d26-9e22-f2e0d9ec27bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cwkw.site-shartbandi-bedun-filter.com/49137bbe-989c-4e10-a119-ed9c4c9f8734",
      "pattern": "[url:value = 'https://cwkw.site-shartbandi-bedun-filter.com/49137bbe-989c-4e10-a119-ed9c4c9f8734']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:25:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e1368f0-d5ca-55e8-8bcb-6ccc1fd7e7a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ghyrtamr.plinko-1xbet.games/d455844f-93ac-4a94-bd62-adccf27b15ef",
      "pattern": "[url:value = 'https://ghyrtamr.plinko-1xbet.games/d455844f-93ac-4a94-bd62-adccf27b15ef']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:20:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--797c151d-5dd9-55be-bd2b-dc4ed08bb6f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://yliw.site-asli-bedon-filter-1xbet.com/5d6be428-cb4e-4ac2-91bb-c6afd66179ef",
      "pattern": "[url:value = 'https://yliw.site-asli-bedon-filter-1xbet.com/5d6be428-cb4e-4ac2-91bb-c6afd66179ef']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:15:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c9ab3bf-1601-5f4b-b934-51f5211e7261",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tdzfnvda.plinko-1xbet.games/d8adcf01-928e-45e0-9da3-6b60aff918ba",
      "pattern": "[url:value = 'https://tdzfnvda.plinko-1xbet.games/d8adcf01-928e-45e0-9da3-6b60aff918ba']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:15:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3f28609-e996-5072-b4fd-e4cd03cd178f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.56.65.191:43676/bin.sh",
      "pattern": "[url:value = 'http://115.56.65.191:43676/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:12:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff0d807a-2e71-5e5c-be24-9659890197b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.40.153.82:45244/i",
      "pattern": "[url:value = 'http://125.40.153.82:45244/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:10:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d044b9a6-934a-5e7a-be86-ef819aec5b74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.44.56.240:34717/i",
      "pattern": "[url:value = 'http://125.44.56.240:34717/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:02:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0864fc3-8602-56bd-9fca-71a02789fcd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.9.198.83:40146/i",
      "pattern": "[url:value = 'http://123.9.198.83:40146/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T06:02:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--157639a1-bfec-53da-8da0-dab49440e517",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ucpwcpfl.jadoou.lat/ef491f20-6343-451b-ba7d-c345a63aafda",
      "pattern": "[url:value = 'https://ucpwcpfl.jadoou.lat/ef491f20-6343-451b-ba7d-c345a63aafda']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29ff8f73-16bd-5f7f-a680-de1b898eaa66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.69.116:43247/i",
      "pattern": "[url:value = 'http://42.224.69.116:43247/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:39:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a9d1649-ff50-5f94-8fcc-eaf7543a106c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.134.117.13:60770/i",
      "pattern": "[url:value = 'http://103.134.117.13:60770/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:37:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--818d7fac-8732-5225-bd03-fcb902e8582b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.118.246.69:45869/i",
      "pattern": "[url:value = 'http://182.118.246.69:45869/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:36:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fb3670e-0b0e-549e-83db-40e647436fe7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.9.198.83:40146/bin.sh",
      "pattern": "[url:value = 'http://123.9.198.83:40146/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:36:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be64033c-ee75-5f9f-a216-af01d6976695",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://109.236.46.199:38124/i",
      "pattern": "[url:value = 'http://109.236.46.199:38124/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:31:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dc24997-78c9-5969-ad03-ab8fac5c59e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://109.236.46.199:38124/bin.sh",
      "pattern": "[url:value = 'http://109.236.46.199:38124/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:31:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0628342-b53f-591b-91cc-d874c0bd6d71",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://blakcinwhitexn.cc/1557fad8649e638f43f20cccf5794a440c70eae03204f5af9fe9850b3197b8ff",
      "pattern": "[url:value = 'http://blakcinwhitexn.cc/1557fad8649e638f43f20cccf5794a440c70eae03204f5af9fe9850b3197b8ff']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:31:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51a8b084-0c7d-512a-8a46-83022fc0ec0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dscf.radioshartbandi.bet/77d2cef4-22ca-4faf-9b8a-d5a45bf6e0c7",
      "pattern": "[url:value = 'https://dscf.radioshartbandi.bet/77d2cef4-22ca-4faf-9b8a-d5a45bf6e0c7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09162460-2e95-506c-874e-def27b7d68e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.75.7.179:39437/i",
      "pattern": "[url:value = 'http://39.75.7.179:39437/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:22:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80f2d354-4c45-57e5-871b-e49bdc1c7d9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.129.129.113:46532/bin.sh",
      "pattern": "[url:value = 'http://123.129.129.113:46532/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:15:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efa8783c-f466-50a4-801c-09c23dcaa5ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.69.116:43247/bin.sh",
      "pattern": "[url:value = 'http://42.224.69.116:43247/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:14:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af2affaf-9e47-5f6c-ae6b-eb535f1ee9a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.134.117.13:60770/bin.sh",
      "pattern": "[url:value = 'http://103.134.117.13:60770/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:12:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eac3415-d868-5718-8867-65a075085232",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.238.170.31:54253/i",
      "pattern": "[url:value = 'http://42.238.170.31:54253/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:07:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b4b5427-12bc-5270-abc0-0da6ca17f5d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.40.153.82:45244/bin.sh",
      "pattern": "[url:value = 'http://125.40.153.82:45244/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:03:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff310111-b261-52f3-9dfb-4a1a9953a308",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.44.147.56:50458/i",
      "pattern": "[url:value = 'http://27.44.147.56:50458/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:01:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04e6843f-cac3-5c8a-91c6-8f81d264fcc7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ewdllypo.betropol.bet/a2ed53fa-8cf2-47be-b407-9a35b201474f",
      "pattern": "[url:value = 'https://ewdllypo.betropol.bet/a2ed53fa-8cf2-47be-b407-9a35b201474f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T05:01:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f91ab8a-2dda-55c7-9ade-131431e8b243",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.238.170.31:54253/bin.sh",
      "pattern": "[url:value = 'http://42.238.170.31:54253/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:57:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2773d0e-23a5-5e9c-adb0-b22fe65396d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.75.7.179:39437/bin.sh",
      "pattern": "[url:value = 'http://39.75.7.179:39437/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:57:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c577f724-82b5-567e-bbeb-413fb0d5beab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bjf54ffm.behtarin-site-shartbandi.com/?ublib=6d76d6bc-05c6-4b46-84fe-68d9d927932c",
      "pattern": "[url:value = 'https://bjf54ffm.behtarin-site-shartbandi.com/?ublib=6d76d6bc-05c6-4b46-84fe-68d9d927932c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:57:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b2ce938-2a6f-5707-84c7-bbb8f3168a4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://183.141.129.79:35801/bin.sh",
      "pattern": "[url:value = 'http://183.141.129.79:35801/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:47:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9913a2d9-76ba-57a7-bd71-251b5de044e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.44.147.56:50458/bin.sh",
      "pattern": "[url:value = 'http://27.44.147.56:50458/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:36:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5560147-6b17-50b1-b2c1-ccda5b06a6ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wcwe.onjabet1.com/349c14a3-d5e3-40a6-9f5e-00e38ddfd47f",
      "pattern": "[url:value = 'https://wcwe.onjabet1.com/349c14a3-d5e3-40a6-9f5e-00e38ddfd47f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:34:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd2c8699-ada3-5f7f-9a56-2401f9f5f032",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.16.86:49868/i",
      "pattern": "[url:value = 'http://110.37.16.86:49868/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:24:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--824cfd0d-312c-52ce-afb3-3694a371f976",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.16.86:49868/bin.sh",
      "pattern": "[url:value = 'http://110.37.16.86:49868/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:23:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efef4dbc-8e90-5710-8c77-408bab1c207e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.189.198.193:39186/i",
      "pattern": "[url:value = 'http://196.189.198.193:39186/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:20:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd232323-ecb0-5921-b955-f1ccc0cdb4c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.216.199.130:36784/bin.sh",
      "pattern": "[url:value = 'http://27.216.199.130:36784/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:20:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afe663ec-10e1-5d31-b09f-445f8a83f36f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.202.207.90:49137/bin.sh",
      "pattern": "[url:value = 'http://221.202.207.90:49137/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:10:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1489e3b-ec90-5adc-9acb-e4feb2cbecbc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://euspwbzy.bet90forward.win/1d2d9da6-7d0f-4773-a771-718b4a5bf76a",
      "pattern": "[url:value = 'https://euspwbzy.bet90forward.win/1d2d9da6-7d0f-4773-a771-718b4a5bf76a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T04:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ec0da80-af83-5f48-a89f-fbc0005d724f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jz8kpepi.jadoou.store/?ublib=45082086-91a1-4aab-9370-58dbd71c821d",
      "pattern": "[url:value = 'https://jz8kpepi.jadoou.store/?ublib=45082086-91a1-4aab-9370-58dbd71c821d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8df5eafd-d2df-53e7-a66a-8896d130aa99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mpdmwhr9.jadoobet.forum/?ublib=a4879063-0c2e-4d42-8570-c2a0c901695a",
      "pattern": "[url:value = 'https://mpdmwhr9.jadoobet.forum/?ublib=a4879063-0c2e-4d42-8570-c2a0c901695a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:53:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b31688e9-36ad-512f-8b47-964728dd4cc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.228.221.117:53555/i",
      "pattern": "[url:value = 'http://42.228.221.117:53555/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:49:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a18f315b-15a5-51a9-b4dc-0921aaf33be2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://brfavfmp.bet90forward.win/c20cfdd6-61d9-4fd3-b9a7-8788f0fa990c",
      "pattern": "[url:value = 'https://brfavfmp.bet90forward.win/c20cfdd6-61d9-4fd3-b9a7-8788f0fa990c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:49:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a7c5052-ff31-5bf6-9ab5-ec14f5738d65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.86.148:40690/i",
      "pattern": "[url:value = 'http://110.36.86.148:40690/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:48:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d42969ac-bc81-5c0e-90ee-b2038fc363ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://iowx.onjabet1.com/03fd785c-4ba8-4272-8d16-284397e51f2c",
      "pattern": "[url:value = 'https://iowx.onjabet1.com/03fd785c-4ba8-4272-8d16-284397e51f2c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:48:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c727fb-51dd-5d47-bd5c-0dc9faad972e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.13.213:55784/i",
      "pattern": "[url:value = 'http://110.37.13.213:55784/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:31:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--470e5e29-c1b5-524a-bb46-7614b71f876e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crehmoqz.bekabet.casino/89c15415-3b55-4d06-a177-c0264f9c539e",
      "pattern": "[url:value = 'https://crehmoqz.bekabet.casino/89c15415-3b55-4d06-a177-c0264f9c539e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:31:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--352c4d7e-af64-5142-be06-da0f9be806b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.69.175:51409/i",
      "pattern": "[url:value = 'http://110.37.69.175:51409/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:31:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d44d98b7-e64c-5e39-b799-caecfc00a8ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.228.221.117:53555/bin.sh",
      "pattern": "[url:value = 'http://42.228.221.117:53555/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:24:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e35df2c4-9f13-5f4b-a12a-3d451ddc604e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.127.192:34807/i",
      "pattern": "[url:value = 'http://182.127.127.192:34807/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:22:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43573477-053d-56f4-b8b6-81534f9b049b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://118.232.137.101:48141/i",
      "pattern": "[url:value = 'http://118.232.137.101:48141/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:17:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886080/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c959421-526b-5773-bbdb-e90f8852e2aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.131.100:40368/i",
      "pattern": "[url:value = 'http://222.141.131.100:40368/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:11:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886079/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47f3c469-dbd3-527b-b3f7-d3d3e2920eeb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.187.249.1:52457/bin.sh",
      "pattern": "[url:value = 'http://119.187.249.1:52457/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T03:03:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886078/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9fd440c-5219-557a-bf1e-03d3144b33ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://s645gfw3.bahsegel90.com/?ublib=370be8fb-9552-4144-890b-2b3b0ab12300",
      "pattern": "[url:value = 'https://s645gfw3.bahsegel90.com/?ublib=370be8fb-9552-4144-890b-2b3b0ab12300']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T02:55:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886077/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65b95030-65e7-5488-bc1e-edb5f6603ecb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nqzp.jadoou.mom/a3df109c-3498-43e9-abcb-49ecaf4d9d57",
      "pattern": "[url:value = 'https://nqzp.jadoou.mom/a3df109c-3498-43e9-abcb-49ecaf4d9d57']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T02:47:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886076/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f40a510f-1aae-52bf-be41-313e166988d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.25.189:59393/i",
      "pattern": "[url:value = 'http://110.37.25.189:59393/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T02:32:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886075/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a582dae7-32c4-53b0-aafb-cd8bf5ac6d07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.38.223.172:35521/i",
      "pattern": "[url:value = 'http://110.38.223.172:35521/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T02:31:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886074/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fa5db82-92cc-5c79-b231-6f1251594203",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.131.100:40368/bin.sh",
      "pattern": "[url:value = 'http://222.141.131.100:40368/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T02:31:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886073/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca2b8bec-6a16-5c63-b6d7-ce61ec529940",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.147.15:44875/i",
      "pattern": "[url:value = 'http://105.184.147.15:44875/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T02:19:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886072/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64bdaa1b-7e6b-5b01-99a8-8f298d9f522d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.194.106:55664/bin.sh",
      "pattern": "[url:value = 'http://182.113.194.106:55664/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T02:03:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886071/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b9a9a9b-5dea-5c1c-a2e9-9607115fcacc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.147.15:44875/bin.sh",
      "pattern": "[url:value = 'http://105.184.147.15:44875/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:55:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886070/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1db1730d-dd8b-5c43-9319-1397ca358833",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sqbw.jadoou.makeup/945aca7b-aec5-4508-a7d4-e1a5dd245828",
      "pattern": "[url:value = 'https://sqbw.jadoou.makeup/945aca7b-aec5-4508-a7d4-e1a5dd245828']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:50:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886069/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adf69fce-713a-5902-a447-9683c5542135",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.11.194:47788/i",
      "pattern": "[url:value = 'http://196.190.11.194:47788/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:46:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886068/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aad1d8eb-096b-51f7-8d55-010b7931f279",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wmgbwskd.pdfbama.com/2e3f1faf-8ebf-48eb-818a-157de1faf62a",
      "pattern": "[url:value = 'https://wmgbwskd.pdfbama.com/2e3f1faf-8ebf-48eb-818a-157de1faf62a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886067/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--847b97a1-b8fa-5be6-a141-d0d0319c5793",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.157.210.26:54448/i",
      "pattern": "[url:value = 'http://103.157.210.26:54448/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:25:44Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886066/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--410ba68e-602c-510c-ad90-a52216dbf68c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.157.210.26:54448/bin.sh",
      "pattern": "[url:value = 'http://103.157.210.26:54448/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:19:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886065/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f22efea-53a9-5a8f-9cab-2ed3ddd09965",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.10.113:48215/i",
      "pattern": "[url:value = 'http://110.37.10.113:48215/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:14:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886064/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a36089dc-d765-51a8-bde7-c88d3609ae6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.134.252.106:56153/i",
      "pattern": "[url:value = 'http://5.134.252.106:56153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:12:01Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886063/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fd53005-7df5-5d1e-9a54-32b896254284",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.210.33:49963/i",
      "pattern": "[url:value = 'http://115.49.210.33:49963/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:01:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886062/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a45d59e0-696f-5a0d-a7db-8de03b36bc14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.15.48:50483/i",
      "pattern": "[url:value = 'http://123.11.15.48:50483/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T01:00:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886061/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6816f07-5821-54c0-b658-d01138d162f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.10.113:48215/bin.sh",
      "pattern": "[url:value = 'http://110.37.10.113:48215/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:55:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886060/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--844b4086-97e8-5e0b-9edc-e51bc9f7506c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.93.115:54259/i",
      "pattern": "[url:value = 'http://105.184.93.115:54259/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:54:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886059/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec55b74-2a49-597b-b877-e4720e3e3cb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hczzqwrl.pinbahis-bedon-filter.com/?ublib=e53b482c-b66a-48c5-91d6-917a1579c741",
      "pattern": "[url:value = 'https://hczzqwrl.pinbahis-bedon-filter.com/?ublib=e53b482c-b66a-48c5-91d6-917a1579c741']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:54:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886058/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc41bf6f-ad4e-52f7-9041-9d4f38c6451a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.58.113:33017/i",
      "pattern": "[url:value = 'http://182.126.58.113:33017/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:49:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886057/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31de84a6-61d6-5ac2-bb8a-1fc8048660fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.93.115:54259/bin.sh",
      "pattern": "[url:value = 'http://105.184.93.115:54259/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:46:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886056/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c52469de-203e-5ff6-8d13-a81430ca4ca0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wjek.jadoou.lol/3deecc0e-2f9c-4789-b647-9f05d9db0f99",
      "pattern": "[url:value = 'https://wjek.jadoou.lol/3deecc0e-2f9c-4789-b647-9f05d9db0f99']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:46:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886055/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7f644ca-5797-5d06-a163-a520051e2b7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.41.4.100:36488/i",
      "pattern": "[url:value = 'http://125.41.4.100:36488/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:44:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886054/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09a12423-4516-5342-8a2d-176bb1986c31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.58.113:33017/bin.sh",
      "pattern": "[url:value = 'http://182.126.58.113:33017/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:39:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886053/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d52d94d-57c4-5500-a129-74dd3769a487",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://218.91.14.10:35128/bin.sh",
      "pattern": "[url:value = 'http://218.91.14.10:35128/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:39:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886052/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d41b8f78-e10f-5a1e-9996-9bc020ab92fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.15.48:50483/bin.sh",
      "pattern": "[url:value = 'http://123.11.15.48:50483/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:33:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886051/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--117d2600-fb3d-5262-921a-369108dd47c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.41.4.100:36488/bin.sh",
      "pattern": "[url:value = 'http://125.41.4.100:36488/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:28:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886050/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--094adc81-518e-51f3-87fc-cc71f1cdcb1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.72.57:52269/i",
      "pattern": "[url:value = 'http://110.36.72.57:52269/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:22:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886049/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a09756b-fe6c-5b70-8b5d-0f6bbf3c8542",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.191.238:60095/i",
      "pattern": "[url:value = 'http://123.5.191.238:60095/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:21:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886048/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50a4e306-bb65-576d-bb69-ca6336655eff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.93.190:55917/i",
      "pattern": "[url:value = 'http://42.224.93.190:55917/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:20:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886047/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4016cf7-c343-5b3c-ae9e-e22174eb0196",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.35.73.89:40757/i",
      "pattern": "[url:value = 'http://36.35.73.89:40757/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:20:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886046/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75092805-3537-5fa1-8fb7-fe9045c651b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.177.91:51675/i",
      "pattern": "[url:value = 'http://112.248.177.91:51675/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:13:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886045/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccc55503-4b7f-5b81-a80f-f8a1f791cdb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.217.45:59698/i",
      "pattern": "[url:value = 'http://115.50.217.45:59698/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-14T00:11:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886044/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b0b8bf7-dbd1-5f44-b70e-3dd7791f2e64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.59.107.34:57247/i",
      "pattern": "[url:value = 'http://5.59.107.34:57247/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T23:56:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886043/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0249cf7-0b02-5f4e-be66-5972caf61e9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.191.238:60095/bin.sh",
      "pattern": "[url:value = 'http://123.5.191.238:60095/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T23:51:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886042/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1179c354-e7d4-5b96-8bd0-5109a09cf025",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cvjd.fileboroo.com/88e01120-9f66-4a2d-b646-d6c0d62bc4d5",
      "pattern": "[url:value = 'https://cvjd.fileboroo.com/88e01120-9f66-4a2d-b646-d6c0d62bc4d5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T23:46:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886041/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38a007cc-9cb7-5e1b-a956-d44831c09f2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.177.91:51675/bin.sh",
      "pattern": "[url:value = 'http://112.248.177.91:51675/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T23:41:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886040/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bf08762-ec00-5d4d-aa17-aea18b4a5b51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.26.225.169:40468/i",
      "pattern": "[url:value = 'http://117.26.225.169:40468/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T23:22:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886039/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9d795cc-2523-55f3-9ea4-adb43e68add8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hqmcfjqy.madgal.life/53f131a4-ca45-4b74-ab13-d929eb4d0cf8",
      "pattern": "[url:value = 'https://hqmcfjqy.madgal.life/53f131a4-ca45-4b74-ab13-d929eb4d0cf8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T23:21:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886038/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--927e8550-6a8f-52d4-bcc7-408081d06c3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.38.207.151:46188/bin.sh",
      "pattern": "[url:value = 'http://110.38.207.151:46188/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T23:02:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886037/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eee1c498-ccf0-58aa-88f6-bbfd30e0b79f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.184.3.184:37223/i",
      "pattern": "[url:value = 'http://220.184.3.184:37223/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:58:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886036/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2bcf9da-a386-5e52-a0ef-20efbee9b2a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://uwkx2xdq.zaribbala.bet/?ublib=5f21ecb1-6984-4066-b901-ea0e59c65fca",
      "pattern": "[url:value = 'https://uwkx2xdq.zaribbala.bet/?ublib=5f21ecb1-6984-4066-b901-ea0e59c65fca']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:56:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886035/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eceb086f-59f3-5f12-a4c9-e547b86adde4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.255.84:36392/i",
      "pattern": "[url:value = 'http://42.239.255.84:36392/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:55:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886034/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ec62771-e489-5d79-8b8a-98e0aee6ba83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xprba39f.jadoou.space/?ublib=84b3e683-bb20-42cf-aa2a-f727e70a5ad3",
      "pattern": "[url:value = 'https://xprba39f.jadoou.space/?ublib=84b3e683-bb20-42cf-aa2a-f727e70a5ad3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886033/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6a09c0d-42bb-58c5-91d6-c71021d3a422",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.26.225.169:40468/bin.sh",
      "pattern": "[url:value = 'http://117.26.225.169:40468/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:53:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886032/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--955e0076-aaa3-5465-b8ef-8e78345ae141",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xt19c0ua.casinomhub.bet/?ublib=c534ce2e-bc8c-454c-a10f-e2bf582d8260",
      "pattern": "[url:value = 'https://xt19c0ua.casinomhub.bet/?ublib=c534ce2e-bc8c-454c-a10f-e2bf582d8260']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:53:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886031/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbb26bbe-d5a0-579e-8db3-2c5fed217e72",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://igowjhcd.madgal.life/58bee191-59f8-4a0f-a2f0-12d0f036f489",
      "pattern": "[url:value = 'https://igowjhcd.madgal.life/58bee191-59f8-4a0f-a2f0-12d0f036f489']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886030/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71e02d28-a6ac-526e-b443-faf9d0e1a79b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.232.7.187:38276/i",
      "pattern": "[url:value = 'http://113.232.7.187:38276/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:47:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886029/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e49d2e8-4530-5caf-a6c4-ebac08a842cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vxqz.bahigo90bet.com/d0e57301-46d4-4b60-adbb-9f1f476ca788",
      "pattern": "[url:value = 'https://vxqz.bahigo90bet.com/d0e57301-46d4-4b60-adbb-9f1f476ca788']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:44:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886028/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cf77607-e043-5712-8e33-e864a8775e2f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.151.83.136:52513/i",
      "pattern": "[url:value = 'http://175.151.83.136:52513/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:42:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886027/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--883692ee-4d07-5b96-b277-288dbae4a764",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.124.53:37383/i",
      "pattern": "[url:value = 'http://105.184.124.53:37383/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:41:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886026/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db1ff782-3984-5fe3-b080-0034dfec8a6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.89.121:43736/i",
      "pattern": "[url:value = 'http://27.215.89.121:43736/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:39:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886025/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--415625fe-0a45-5722-ae0e-5d1230973d78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.89.121:43736/bin.sh",
      "pattern": "[url:value = 'http://27.215.89.121:43736/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:34:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886024/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4db108e9-84bc-502e-84b7-32fb82e06a9b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.255.84:36392/bin.sh",
      "pattern": "[url:value = 'http://42.239.255.84:36392/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886023/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aa744ab-832e-50a7-a79b-14ba8a39cfb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.124.53:37383/bin.sh",
      "pattern": "[url:value = 'http://105.184.124.53:37383/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:13:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886021/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42d3b5cc-a97b-5b8d-8603-1d262e1f0f76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.0.237:49157/bin.sh",
      "pattern": "[url:value = 'http://222.137.0.237:49157/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:13:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886022/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--850bac76-a854-5244-abde-455a3b652e27",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.151.83.136:52513/bin.sh",
      "pattern": "[url:value = 'http://175.151.83.136:52513/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:11:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886020/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb27a42f-01eb-5df1-a744-2026b626dee7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.227.236.130:42069/bin.sh",
      "pattern": "[url:value = 'http://42.227.236.130:42069/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:10:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886019/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7420b6b0-f324-5738-8f8e-2677da9ccfc0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.15.130:40264/i",
      "pattern": "[url:value = 'http://182.119.15.130:40264/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T22:03:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886018/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70d631c7-76d2-59c8-94b5-c7b31dc9a6d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bwimlqru.jetbet.download/6de085cd-42d2-4a0c-9be2-1a10c489b076",
      "pattern": "[url:value = 'https://bwimlqru.jetbet.download/6de085cd-42d2-4a0c-9be2-1a10c489b076']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886017/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88a4354a-3359-5148-b99d-25eb7374dc44",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.82.151:36930/i",
      "pattern": "[url:value = 'http://115.57.82.151:36930/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:56:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886016/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed7f17b2-ce20-5b15-9ef6-dcc72210fd3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.143.187:58897/i",
      "pattern": "[url:value = 'http://59.96.143.187:58897/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:49:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886015/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53113f07-4f09-5fe4-811a-6a93e948f1e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.172.247.123/45/renewcrypterforresults.hta",
      "pattern": "[url:value = 'http://107.172.247.123/45/renewcrypterforresults.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:46:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886014/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1225c04b-9a47-52d7-9c36-885727c44208",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.172.247.123/36/weneedbestthingscomingfromthegod.hta",
      "pattern": "[url:value = 'http://107.172.247.123/36/weneedbestthingscomingfromthegod.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:46:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886013/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf8f4e8c-1997-5ebb-ad60-4fdc61835893",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://www.mbowen.org/sUYQArZTfwvQYhC206.bin",
      "pattern": "[url:value = 'https://www.mbowen.org/sUYQArZTfwvQYhC206.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:45:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886012/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be372eb4-422a-595a-8e50-174409c61c78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.172.247.123/226/eccr/vcc.exe",
      "pattern": "[url:value = 'http://107.172.247.123/226/eccr/vcc.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:45:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886011/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2d780b5-098c-5a97-baf5-5e2a0304af12",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bfpu.rayeganmarket.com/3a83cb4d-11c1-4e91-887f-099e97bc5f77",
      "pattern": "[url:value = 'https://bfpu.rayeganmarket.com/3a83cb4d-11c1-4e91-887f-099e97bc5f77']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:45:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886010/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af61ac4c-96e4-5c66-a6a7-5ff4e656e85a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.53.99.119:51675/i",
      "pattern": "[url:value = 'http://61.53.99.119:51675/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:42:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886009/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9adea00-ef3f-5ff7-b783-0edcf80f0e0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.160.227:39646/i",
      "pattern": "[url:value = 'http://115.48.160.227:39646/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:38:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886008/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--867aa365-81e9-5b77-a277-9ec5bbd969a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.172.247.123/226/weneedbestthingswithbestversionsneed.hta",
      "pattern": "[url:value = 'http://107.172.247.123/226/weneedbestthingswithbestversionsneed.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886007/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed769cb7-65e5-5fa1-a584-eed971fa72cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.54.101.152/50/greatdaycomingformylifetogetmegood.hta",
      "pattern": "[url:value = 'http://209.54.101.152/50/greatdaycomingformylifetogetmegood.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:29:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886006/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aba73bd-1e08-5ba3-898f-67eab3564836",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.56.232.66:55589/bin.sh",
      "pattern": "[url:value = 'http://42.56.232.66:55589/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:28:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886004/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf2e9685-79b8-5013-beb9-cf03bb2cc044",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.143.187:58897/bin.sh",
      "pattern": "[url:value = 'http://59.96.143.187:58897/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:28:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886005/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c81013-6fb9-564d-bb3b-b07f2d0519f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.210.186.206/40/wellmaintinaedthingsarebestofroprofessional.hta",
      "pattern": "[url:value = 'http://192.210.186.206/40/wellmaintinaedthingsarebestofroprofessional.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:28:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886002/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--745e1b4f-1175-5c78-a787-9c30c482dbb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.236.217.81/124/givingbestthingswithbetterplaceonhere.hta",
      "pattern": "[url:value = 'http://192.236.217.81/124/givingbestthingswithbetterplaceonhere.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:28:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886003/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0294f464-fe39-555d-9775-40b9f37edcc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.143.36/33/wehavingbestsolutionsforbetterplacescomingfor.hta",
      "pattern": "[url:value = 'http://107.173.143.36/33/wehavingbestsolutionsforbetterplacescomingfor.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:28:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886001/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d097246-6b3e-5563-aed4-b94398f80cf3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.70.168/60/goodthingsareavailableforhtebsestbthignsforneway.hta",
      "pattern": "[url:value = 'http://104.168.70.168/60/goodthingsareavailableforhtebsestbthignsforneway.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3886000/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68cb77e1-8457-5260-8922-37a25700a115",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.227.236.130:42069/i",
      "pattern": "[url:value = 'http://42.227.236.130:42069/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885999/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bd788ff-f1a2-5cfd-a22b-2ba0248c1c79",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.53.99.119:51675/bin.sh",
      "pattern": "[url:value = 'http://61.53.99.119:51675/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885998/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80522f8f-4a0c-5177-9665-5ace2494468c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.47.146/22/img_175356.png",
      "pattern": "[url:value = 'http://107.173.47.146/22/img_175356.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:17:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885997/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b893a82-4d2d-5308-b6c0-521d0f160789",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.47.146/22/goodthingsarebestofrbetterwayscomingformetogive.hta",
      "pattern": "[url:value = 'http://107.173.47.146/22/goodthingsarebestofrbetterwayscomingformetogive.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:17:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885996/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c6f93cc-2b36-54b7-a511-b30be9eae522",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.160.121.177/34/secured_stub.ps1",
      "pattern": "[url:value = 'http://217.160.121.177/34/secured_stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885995/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--885acbc3-4b45-5660-a05b-b9fd811d3090",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://87.106.48.217/113/wce/privatethignsareverygoodformaitiasentriethinsgs.hta",
      "pattern": "[url:value = 'http://87.106.48.217/113/wce/privatethignsareverygoodformaitiasentriethinsgs.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:16:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885994/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8323a4f8-4f5f-5bb3-a68a-b26d26bd9088",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://87.106.48.217/113/verygoodbirthdaycomingforeerytimefwithbestthigns.vbe",
      "pattern": "[url:value = 'http://87.106.48.217/113/verygoodbirthdaycomingforeerytimefwithbestthigns.vbe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:16:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885993/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--911115c4-5711-5098-a169-eed9bf4640ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.143.52/145/img_012558.png",
      "pattern": "[url:value = 'http://107.173.143.52/145/img_012558.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:15:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885992/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04e93e04-6cf2-5378-98bc-7dae3516d9de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://46.183.223.88/57/img_021550.png",
      "pattern": "[url:value = 'http://46.183.223.88/57/img_021550.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:14:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885991/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55180c56-e1bb-50d7-96de-b3608bca9585",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://46.183.223.88/57/nimiddlemaninthisindutrytogetbackgoodforme.hta",
      "pattern": "[url:value = 'http://46.183.223.88/57/nimiddlemaninthisindutrytogetbackgoodforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:14:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885990/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cc29c0e-be64-579d-bdd8-957a78403edb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://specsaversllc.online/mrkelly13/qk3FhjayJfgjjLonmTMtgt9pw6hrKmMImzjw2eqKGsHqMovE.js",
      "pattern": "[url:value = 'https://specsaversllc.online/mrkelly13/qk3FhjayJfgjjLonmTMtgt9pw6hrKmMImzjw2eqKGsHqMovE.js']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:13:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885989/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1bec3d1-39b9-5313-aa80-f8b4da9ac241",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://204.44.93.68/img/img_013554.png",
      "pattern": "[url:value = 'http://204.44.93.68/img/img_013554.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:11:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885988/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18ed7057-ef33-528e-abaf-902d5305efa2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://204.44.93.68/20/gooddressingskillgoofforme.hta",
      "pattern": "[url:value = 'http://204.44.93.68/20/gooddressingskillgoofforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:11:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885987/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5adabeef-d6bf-5acf-896b-34fb8d6b59ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.79.158:39801/i",
      "pattern": "[url:value = 'http://222.138.79.158:39801/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:06:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885986/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98ba688a-c097-5801-b89d-99ab148d2e7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.236.217.68/85/seethebestthings.js",
      "pattern": "[url:value = 'http://192.236.217.68/85/seethebestthings.js']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:04:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885985/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ecc82a0-3ea8-5b18-81b5-655166768230",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.236.217.68/85/ecc/cxx.hta",
      "pattern": "[url:value = 'http://192.236.217.68/85/ecc/cxx.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:04:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885984/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c322c061-4b3d-5071-82ce-9bb3d6570b92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.227.99/225/img_171115.png",
      "pattern": "[url:value = 'http://107.173.227.99/225/img_171115.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:02:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885983/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--617245a4-0cb4-559e-a056-789eb66fbe75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.175.202.168/44/givenbestnetworkingskillforbetterofrme.vbe",
      "pattern": "[url:value = 'http://107.175.202.168/44/givenbestnetworkingskillforbetterofrme.vbe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:01:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885980/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f145430-3316-5129-b4de-b17676891cc8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.227.99/225/wegivenbestthingsforeverybodytogive.hta",
      "pattern": "[url:value = 'http://107.173.227.99/225/wegivenbestthingsforeverybodytogive.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:01:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885981/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b79ca393-60a0-5ba2-87bc-c68653015851",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.175.202.168/44/unv/givemebestthingswithbestprocssionthigns.hta",
      "pattern": "[url:value = 'http://107.175.202.168/44/unv/givemebestthingswithbestprocssionthigns.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:01:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885982/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7fe7fbe-c907-54be-b914-b8f1c48581f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dawn-mud-d34f.phzinhoooo.workers.dev/FTM0-40PO-AO28-G98E/img_yh7kna.png",
      "pattern": "[url:value = 'https://dawn-mud-d34f.phzinhoooo.workers.dev/FTM0-40PO-AO28-G98E/img_yh7kna.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:00:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885979/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--827353ed-afeb-558a-a80b-293b138371f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.116.236.163/35/img_180337.png",
      "pattern": "[url:value = 'http://194.116.236.163/35/img_180337.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:00:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885978/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--284aff91-b442-5ab9-9d23-c01300a09fe6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lgmkszyl.site-shartbandi-farsi.com/21922487-a5a8-4607-864d-316e18529e77",
      "pattern": "[url:value = 'https://lgmkszyl.site-shartbandi-farsi.com/21922487-a5a8-4607-864d-316e18529e77']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T21:00:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885977/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d31c6baf-e0b5-549a-983d-112f97a23d42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://198.23.144.23/shell/secured_stub.ps1",
      "pattern": "[url:value = 'http://198.23.144.23/shell/secured_stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:59:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885976/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1cc7fc6-c38a-5ba2-ae60-ef205e1653d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://198.23.144.23/129/goodthingsforgreatnessgoodfor.vbe",
      "pattern": "[url:value = 'http://198.23.144.23/129/goodthingsforgreatnessgoodfor.vbe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:59:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885974/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--490c5378-f395-5c62-9dbd-dc7d94d64492",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://198.23.144.23/129/oo/bissbetnetorkingmarketthingscomingfor.hta",
      "pattern": "[url:value = 'http://198.23.144.23/129/oo/bissbetnetorkingmarketthingscomingfor.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:59:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885975/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d832e57-c5a4-5fe5-99c9-9fc12e0e3613",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.236.217.77/86/uneedbestthingsfrobetterplacescomingforme.js",
      "pattern": "[url:value = 'http://192.236.217.77/86/uneedbestthingsfrobetterplacescomingforme.js']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:58:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885973/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eb8c992-fe82-552b-bc69-1c2bcfcc64b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.207.196.86/huhu/titanjr.arm7",
      "pattern": "[url:value = 'http://45.207.196.86/huhu/titanjr.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:57:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885969/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf41b4f5-17ae-5caf-937b-77401fd8cf4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.207.196.86/huhu/titanjr.arm6",
      "pattern": "[url:value = 'http://45.207.196.86/huhu/titanjr.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:57:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885970/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b77bc321-201a-5eb4-883c-76bed346e440",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.207.196.86/huhu/titanjr.spc",
      "pattern": "[url:value = 'http://45.207.196.86/huhu/titanjr.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:57:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885971/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--997d5139-4bc2-5901-a160-be5e736b841e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.207.196.86/huhu/titanjr.arm5",
      "pattern": "[url:value = 'http://45.207.196.86/huhu/titanjr.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:57:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885972/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--914d53c8-3918-5e77-8f1a-a012f18ec2ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.207.196.86/huhu/titanjr.m68k",
      "pattern": "[url:value = 'http://45.207.196.86/huhu/titanjr.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:57:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885968/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--992ccf6e-3cf6-5157-9292-4cc04e133c48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.236.217.77/86/ecv/cxc.hta",
      "pattern": "[url:value = 'http://192.236.217.77/86/ecv/cxc.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:57:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885967/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3855eeb-a0d1-5019-86be-a9e2e8ec6145",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qnu58lbv.varzeshlife.ir/?ublib=4d46975c-40a9-4757-b9c1-88917f25d18e",
      "pattern": "[url:value = 'https://qnu58lbv.varzeshlife.ir/?ublib=4d46975c-40a9-4757-b9c1-88917f25d18e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:55:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885966/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0db94f8-58c1-50f9-88ea-0e2308e99c06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.174.146.3/emqXijr191.bin",
      "pattern": "[url:value = 'http://107.174.146.3/emqXijr191.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:51:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885965/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8e98cd8-fe7e-52b4-88a4-9d4500ce4efd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hxea.psikologer.com/fb469318-6810-412d-bc4b-fc84cb9eabad",
      "pattern": "[url:value = 'https://hxea.psikologer.com/fb469318-6810-412d-bc4b-fc84cb9eabad']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:44:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885964/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cc8e0d2-2c84-5bd3-8760-25e63d83f910",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.79.158:39801/bin.sh",
      "pattern": "[url:value = 'http://222.138.79.158:39801/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:33:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885963/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7955af68-f1cb-5bb6-8a5a-c395a18fe7a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.197.118:47227/bin.sh",
      "pattern": "[url:value = 'http://120.28.197.118:47227/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:28:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885962/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0282dea-ff91-5b6e-9026-a06ba992f93a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.103.116.68:53661/i",
      "pattern": "[url:value = 'http://59.103.116.68:53661/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885961/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8160c656-af20-5c2e-bf99-5799cddf7937",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.113.115:34830/i",
      "pattern": "[url:value = 'http://112.248.113.115:34830/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:07:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885960/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1094ced-502a-541d-886b-c2858bf2ca4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://obsudfch.site-shartbandi-enfejar.bet/4ed9d899-1b76-4912-a54c-12b1e0d060d4",
      "pattern": "[url:value = 'https://obsudfch.site-shartbandi-enfejar.bet/4ed9d899-1b76-4912-a54c-12b1e0d060d4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T20:04:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885959/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a98820f-43ea-56a5-bd2b-8ab437787bdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.155.195.215:53450/i",
      "pattern": "[url:value = 'http://219.155.195.215:53450/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:56:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885958/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ded1e765-2cc9-57e9-92f3-e323427ab481",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://216.249.4.20:48369/i",
      "pattern": "[url:value = 'http://216.249.4.20:48369/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:56:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885957/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5989efb6-d265-5b7c-b4c2-073eaac3840a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://216.249.4.20:48369/bin.sh",
      "pattern": "[url:value = 'http://216.249.4.20:48369/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:47:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885956/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23e9dea5-7ef7-5f2d-954a-383863daffd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ecyz.plinko-1xbet.games/1427ff78-0347-4582-a70a-0b42a371875e",
      "pattern": "[url:value = 'https://ecyz.plinko-1xbet.games/1427ff78-0347-4582-a70a-0b42a371875e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:45:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885955/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a759cab-65a1-52d0-a260-7c5015c3c253",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.77.34:38726/i",
      "pattern": "[url:value = 'http://110.36.77.34:38726/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:44:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885954/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8eafc861-e6dc-5241-bfde-13087cb5ef82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.155.195.215:53450/bin.sh",
      "pattern": "[url:value = 'http://219.155.195.215:53450/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:41:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885953/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5504bf3e-71be-5ae8-b15f-579d553db30a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://223.151.249.23:38648/bin.sh",
      "pattern": "[url:value = 'http://223.151.249.23:38648/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:36:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885952/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5069e0b-a060-5b69-b9b8-d38a22bf60de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.116.111.62:43207/bin.sh",
      "pattern": "[url:value = 'http://171.116.111.62:43207/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:12:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885951/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4f1395e-95d8-5a99-ab4c-4ac183222f2f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://texjqbwa.site-shartbandi-bedun-filter.com/53513975-0ab6-448d-9de3-b77e36a4e3ce",
      "pattern": "[url:value = 'https://texjqbwa.site-shartbandi-bedun-filter.com/53513975-0ab6-448d-9de3-b77e36a4e3ce']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:09:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885950/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d11f2dd-7ac5-5f64-9568-2bbbe021f539",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.224.66.14:53221/i",
      "pattern": "[url:value = 'http://105.224.66.14:53221/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:06:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885949/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--742d0a87-7391-526e-a45e-0a1ca49313b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.141.232:43521/i",
      "pattern": "[url:value = 'http://59.96.141.232:43521/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T19:05:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885948/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d323b58-399f-5440-8833-a8eda42339c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ign0g5ax.site-shartbandi-khareji.com/?ublib=f5e33013-fea1-4dff-acaf-7fb9aa754359",
      "pattern": "[url:value = 'https://ign0g5ax.site-shartbandi-khareji.com/?ublib=f5e33013-fea1-4dff-acaf-7fb9aa754359']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:54:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885947/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dea61708-0462-566f-a059-c747f09cfaa0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wjyt.betturkey.bet/df0cac38-39b0-41ff-9c9f-6f17db7377ff",
      "pattern": "[url:value = 'https://wjyt.betturkey.bet/df0cac38-39b0-41ff-9c9f-6f17db7377ff']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:43:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885946/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2b51205-3d30-59d5-94ac-2f27c36b6d6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.224.66.14:53221/bin.sh",
      "pattern": "[url:value = 'http://105.224.66.14:53221/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:42:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885945/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6197fc4e-33f2-5582-b1df-ee687300ada7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://58.208.16.222:3588/i",
      "pattern": "[url:value = 'http://58.208.16.222:3588/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:40:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885944/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f3bb727-e05d-5ffd-b8dd-72e682b867c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.194.106:55664/i",
      "pattern": "[url:value = 'http://182.113.194.106:55664/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:39:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885943/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efee35fc-69fe-5ec9-8e42-84bd7fc4b8e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.149.165:57807/i",
      "pattern": "[url:value = 'http://115.48.149.165:57807/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:22:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885942/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bf341ae-499e-599e-84ff-9a303e150e07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.189.200.96:40294/i",
      "pattern": "[url:value = 'http://119.189.200.96:40294/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:17:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885941/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7c51333-3ddd-5b1b-94ac-25b312373ae4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nswofmyl.site-shartbandi-50toman.com/1d4f406e-85a9-4e87-9be4-99ae4b016b79",
      "pattern": "[url:value = 'https://nswofmyl.site-shartbandi-50toman.com/1d4f406e-85a9-4e87-9be4-99ae4b016b79']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:13:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885940/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a17d8fb-4432-5426-afdf-f01a973957ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.178.52.170:46321/bin.sh",
      "pattern": "[url:value = 'http://110.178.52.170:46321/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T18:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885939/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d692cf5d-f5d2-5a23-8e7f-e72a0e58c5ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.25.33:45409/i",
      "pattern": "[url:value = 'http://110.36.25.33:45409/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:55:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885938/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3aa967a1-1f6a-5614-9940-fdd58b230b89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://p9kos7r3.scriptyek.com/?ublib=78ce0396-6765-4b9c-a78e-8a73ff3d54d8",
      "pattern": "[url:value = 'https://p9kos7r3.scriptyek.com/?ublib=78ce0396-6765-4b9c-a78e-8a73ff3d54d8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:52:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885937/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89426db3-d6f3-5449-b9b3-8980d31b9c4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kzjx.betropol.bet/ac0e1f83-9ee4-4487-8a47-f81e3e90755c",
      "pattern": "[url:value = 'https://kzjx.betropol.bet/ac0e1f83-9ee4-4487-8a47-f81e3e90755c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:44:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885936/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--679da431-9439-5bb9-8d30-be7d55dd9616",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.112.29.45:59971/i",
      "pattern": "[url:value = 'http://182.112.29.45:59971/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:37:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885935/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afc99253-1714-5141-b6e1-68f04a717fe5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.25.33:45409/bin.sh",
      "pattern": "[url:value = 'http://110.36.25.33:45409/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:26:55Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885934/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb838d7c-8715-59fe-a9dc-48b609bc5d21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tdhviatnam.com/secured_stub.ps1",
      "pattern": "[url:value = 'https://tdhviatnam.com/secured_stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:22:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885933/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--944b44a0-0e87-5bdd-aa5c-479c21d82788",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.143.52/30/goodthingsarecoming.hta",
      "pattern": "[url:value = 'http://107.173.143.52/30/goodthingsarecoming.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:21:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885931/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b121e6ac-cbc2-5b19-a91a-620a5aa43fc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.143.52/20/givinggoodchancestogivebetterplacesforme.hta",
      "pattern": "[url:value = 'http://107.173.143.52/20/givinggoodchancestogivebetterplacesforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:21:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885932/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60c68604-b6d3-5c17-a04c-bafe289f6393",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.143.52/145/givingbestthingsbeterformegood.hta",
      "pattern": "[url:value = 'http://107.173.143.52/145/givingbestthingsbeterformegood.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:21:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885930/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e214209-641d-5ff9-adc4-a794a869dcba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.116.236.163/35/weneedbestthingsforeverywheretounderstand.hta",
      "pattern": "[url:value = 'http://194.116.236.163/35/weneedbestthingsforeverywheretounderstand.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:20:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885929/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e597a1a6-8b34-51c5-91cc-b4a1875e1e21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://etomskuk.site-shartbandi5000toman.com/bb76e6aa-c5c8-4a03-b702-ac44a2ce14be",
      "pattern": "[url:value = 'https://etomskuk.site-shartbandi5000toman.com/bb76e6aa-c5c8-4a03-b702-ac44a2ce14be']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:18:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885928/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4998dbe-b590-5b8c-b509-98d5735dc46e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://69.12.83.188/Upaavirkeligheden.exe",
      "pattern": "[url:value = 'http://69.12.83.188/Upaavirkeligheden.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:15:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885927/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa7669e7-cbc9-57ac-9ff9-00f3bd59aa9b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://69.12.83.188/payload.ps1",
      "pattern": "[url:value = 'http://69.12.83.188/payload.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:15:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885926/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0e31338-f8b2-53d3-bdb5-03e6b5724286",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://204.44.93.68/img/MSI_PRO.png",
      "pattern": "[url:value = 'http://204.44.93.68/img/MSI_PRO.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885923/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--089397ca-afa7-5482-9fc2-41883a4f38bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://172.245.195.209/80/weneedtogivebestthings.hta",
      "pattern": "[url:value = 'http://172.245.195.209/80/weneedtogivebestthings.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885924/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d94aee56-970e-54f2-bd75-468ad9bda677",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://172.245.195.209/80/img_194042.png",
      "pattern": "[url:value = 'http://172.245.195.209/80/img_194042.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885925/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ce72d79-4736-5390-b3c7-77e5b7b310ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.170.109.82:8080/system",
      "pattern": "[url:value = 'http://107.170.109.82:8080/system']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T17:00:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885922/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e00c6bb-4ce0-5146-ab6d-9fe8f45f3862",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://109.169.233.123:37175/i",
      "pattern": "[url:value = 'http://109.169.233.123:37175/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:56:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885921/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0112182b-6703-501d-8e2b-2eaf080f1b73",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.225.135.18:1212/a92.elf",
      "pattern": "[url:value = 'http://45.225.135.18:1212/a92.elf']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:54:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885920/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b07f3aa-35ab-5257-a9ae-9257c57e61bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://30zu55sj.radioshartbandi.bet/?ublib=38edcbc4-8597-4604-8ecc-d35afe796600",
      "pattern": "[url:value = 'https://30zu55sj.radioshartbandi.bet/?ublib=38edcbc4-8597-4604-8ecc-d35afe796600']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:54:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885919/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a6c606a-9ca4-51bd-928a-90439a051cf6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.100.246.225:48336/i",
      "pattern": "[url:value = 'http://36.100.246.225:48336/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:52:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885918/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13edf70b-a280-5bcc-8dc7-0c96919f200f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.90.113:57377/bin.sh",
      "pattern": "[url:value = 'http://42.231.90.113:57377/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:49:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885917/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1307665-ce9e-538b-a7dd-de25b987afec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.53.15.130:35056/i",
      "pattern": "[url:value = 'http://61.53.15.130:35056/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:44:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885916/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8219afa8-3959-50da-97c1-fa01e1ed336e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bycl.betpublic.casino/cad59a90-7290-4b4c-9a90-a970375fe9e3",
      "pattern": "[url:value = 'https://bycl.betpublic.casino/cad59a90-7290-4b4c-9a90-a970375fe9e3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:43:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885915/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9988fe6-d274-5675-9ea7-64ae18626453",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://microsoftupdater.info/dl/79649bc7-c772-48ea-830f-9bdccb5b951c/client.exe",
      "pattern": "[url:value = 'https://microsoftupdater.info/dl/79649bc7-c772-48ea-830f-9bdccb5b951c/client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:38:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885914/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--686b59c4-c5e4-5540-a0ed-23f52e2117eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.100.246.225:48336/bin.sh",
      "pattern": "[url:value = 'http://36.100.246.225:48336/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:34:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885913/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec4b112-dcf0-57f4-92da-ebca4900ced7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://stvdwyqw.site-asli-bedon-filter-1xbet.com/eea74b7a-53a5-4a14-b38b-82e93b4a8f8b",
      "pattern": "[url:value = 'https://stvdwyqw.site-asli-bedon-filter-1xbet.com/eea74b7a-53a5-4a14-b38b-82e93b4a8f8b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:24:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885912/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b3668f1-7c03-539f-92b4-d4c376f8547b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.53.15.130:35056/bin.sh",
      "pattern": "[url:value = 'http://61.53.15.130:35056/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:18:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885911/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b5e4d11-b8c4-5ec5-9f25-e6bd79d4d232",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.115.146:50105/i",
      "pattern": "[url:value = 'http://182.116.115.146:50105/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:17:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885910/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--871aa40e-f89e-5e16-86be-f08ea2628f11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/skid.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/skid.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:10:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885909/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1341f8c-c08c-5aad-84bd-c5aff99216c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/skid.x86",
      "pattern": "[url:value = 'http://94.154.43.42/skid.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:09:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885906/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59174084-ce54-5111-bcbe-b0ec056ec6ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.38.26.9:47753/i",
      "pattern": "[url:value = 'http://171.38.26.9:47753/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:09:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885907/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e5d4a37-8638-5bf8-b4bf-483a10058da4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.38.207.151:46188/i",
      "pattern": "[url:value = 'http://110.38.207.151:46188/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:09:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885908/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f101624-172b-5ea1-8af6-3d907059c9ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.157.63.250:44957/i",
      "pattern": "[url:value = 'http://219.157.63.250:44957/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T16:06:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885904/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbb69b3a-f59f-5ecc-81e4-f9672f9b101b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.115.146:50105/bin.sh",
      "pattern": "[url:value = 'http://182.116.115.146:50105/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:50:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885902/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a73a0ce-39b4-5639-b850-c8c82b3a851e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.35.73.89:40757/bin.sh",
      "pattern": "[url:value = 'http://36.35.73.89:40757/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:50:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885903/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--008eafd7-b256-5666-9c5c-bd642787b5e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zzcg.bet90forward.win/2345400b-ec91-42b8-97d5-0023e8d71552",
      "pattern": "[url:value = 'https://zzcg.bet90forward.win/2345400b-ec91-42b8-97d5-0023e8d71552']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:42:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885901/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dafd77c-4f2a-53ad-ac90-2bd575bdaeb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.157.63.250:44957/bin.sh",
      "pattern": "[url:value = 'http://219.157.63.250:44957/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:41:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885900/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1e43093-5237-592b-8bbf-512f890a7163",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kaumdowe.jadoou.sbs/c4085954-4a4d-40a9-8098-6fad2c939e17",
      "pattern": "[url:value = 'https://kaumdowe.jadoou.sbs/c4085954-4a4d-40a9-8098-6fad2c939e17']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:38:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885899/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fb66047-a053-5dfe-9e47-b0fbe5261bb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.219.222.7:45729/i",
      "pattern": "[url:value = 'http://27.219.222.7:45729/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:32:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885898/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fca5fbd3-2d23-5fa6-aa7a-f99159288661",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.219.222.7:45729/bin.sh",
      "pattern": "[url:value = 'http://27.219.222.7:45729/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:09:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885897/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--badb42a1-3653-5cf0-b209-0ca45a09aedc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.42.90.102:56735/i",
      "pattern": "[url:value = 'http://59.42.90.102:56735/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T15:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885896/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71215d4c-17d2-5ce8-94f1-57416d79215e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.56.156.177:33000/i",
      "pattern": "[url:value = 'http://115.56.156.177:33000/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:58:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885895/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c354a81-d3a8-5bfd-a559-9d7066690a91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://2cca57zt.onjabet1.com/?ublib=6e5cbd31-6374-4350-842c-0fb23e05a639",
      "pattern": "[url:value = 'https://2cca57zt.onjabet1.com/?ublib=6e5cbd31-6374-4350-842c-0fb23e05a639']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:53:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885894/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54ec61a8-c5e6-5d37-9106-126c1c38c833",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ulgqmzld.jadoou.online/bb7eb0e3-5f84-420b-817e-9bbffc51623a",
      "pattern": "[url:value = 'https://ulgqmzld.jadoou.online/bb7eb0e3-5f84-420b-817e-9bbffc51623a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:44:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885893/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f15a254-5710-5ee9-94a6-df957b0a335b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.158:58803/i",
      "pattern": "[url:value = 'http://200.112.129.158:58803/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:43:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885892/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4eae3af8-2a82-5338-ac14-e567dde69e4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dzjr.bekabet.casino/0b8ec5af-51b5-41d2-a6f6-52672aa99344",
      "pattern": "[url:value = 'https://dzjr.bekabet.casino/0b8ec5af-51b5-41d2-a6f6-52672aa99344']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:41:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885891/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7083a0fa-f4bf-5b0c-bb27-f55212148ab3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.42.90.102:56735/bin.sh",
      "pattern": "[url:value = 'http://59.42.90.102:56735/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:34:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885890/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac7df27a-f400-5121-9cda-bc73c61d39df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.1.39:42645/i",
      "pattern": "[url:value = 'http://196.190.1.39:42645/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:26:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885889/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c9475df-287b-5348-b14a-465036edc264",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.158:58803/bin.sh",
      "pattern": "[url:value = 'http://200.112.129.158:58803/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:16:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885888/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8029d617-5c6e-5b97-acdb-335295b7f5c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.190.178:57119/i",
      "pattern": "[url:value = 'http://112.248.190.178:57119/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:14:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885887/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46eba93c-b264-5524-b73c-65fac1dd7d49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nmcdn.info/NMLoader%20v%204.2.1.zip",
      "pattern": "[url:value = 'https://nmcdn.info/NMLoader%20v%204.2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:14:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885886/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c9da446-4464-5c86-ad03-dba47e91aa98",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kaleda.pro/69733be4.exe",
      "pattern": "[url:value = 'https://kaleda.pro/69733be4.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:13:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885885/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36bb76f1-efda-5490-80cf-5966a19ecb78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kaleda.pro/50bf4317.exe",
      "pattern": "[url:value = 'https://kaleda.pro/50bf4317.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885884/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f0f1e60-6cb7-5993-bc9b-3e77dc44822f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kaleda.pro/96de8ea9.exe",
      "pattern": "[url:value = 'https://kaleda.pro/96de8ea9.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:08:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885883/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb5919ab-74aa-540a-92a3-6df29f214bb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.1.39:42645/bin.sh",
      "pattern": "[url:value = 'http://196.190.1.39:42645/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:01:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885882/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea7a88bc-127d-516f-b76c-ffe7bd6c2f90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://noventis8.com/lxnew.png",
      "pattern": "[url:value = 'http://noventis8.com/lxnew.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T14:00:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885881/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3dc4d16-e1f5-5502-9424-48b92033eb87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nexrogcapital.xyz/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
      "pattern": "[url:value = 'https://nexrogcapital.xyz/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:59:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885880/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69d1b581-fa3c-555c-85ca-55d18afeb08a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.190.178:57119/bin.sh",
      "pattern": "[url:value = 'http://112.248.190.178:57119/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:52:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885879/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--058d8ce1-7aa4-51c0-a813-7fe7d4918cfe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.230.17.60:42266/i",
      "pattern": "[url:value = 'http://42.230.17.60:42266/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:51:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885878/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7cac9d7-8375-5117-9e96-99b5d1e75a24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://yxxyqkkf.jadoou.one/5f5d1b02-aca5-4491-a0ee-e53048a627c0",
      "pattern": "[url:value = 'https://yxxyqkkf.jadoou.one/5f5d1b02-aca5-4491-a0ee-e53048a627c0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:48:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885877/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5c50eb8-6587-58ac-b077-86664c2ffa52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://genesis-cheats.com/files/Genesis.zip",
      "pattern": "[url:value = 'https://genesis-cheats.com/files/Genesis.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:45:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885876/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e16a113b-89a5-5a04-b488-11d86125adf6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hnzi.behtarin-site-shartbandi.com/2a563779-d2bb-492c-9164-4dd12c9dd8d0",
      "pattern": "[url:value = 'https://hnzi.behtarin-site-shartbandi.com/2a563779-d2bb-492c-9164-4dd12c9dd8d0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:42:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885875/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8b93176-cfbe-55ef-974b-8644774f4f7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.175.13.148:55899/i",
      "pattern": "[url:value = 'http://175.175.13.148:55899/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885874/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8ea223f-1417-5b88-b1e5-fa9a65383b07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.85.150:52270/i",
      "pattern": "[url:value = 'http://110.37.85.150:52270/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:16:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885873/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c7f38ee-50a1-52be-8d48-f5c1caba279c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.140/files/8130232421/rb0yFh2.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/8130232421/rb0yFh2.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:08:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885872/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82f10177-00a0-5ae5-bee8-117fb7c99088",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.175.13.148:55899/bin.sh",
      "pattern": "[url:value = 'http://175.175.13.148:55899/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:07:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885871/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70d26839-4446-5103-895f-7753847dfb7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.58.188.169:33841/i",
      "pattern": "[url:value = 'http://59.58.188.169:33841/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T13:06:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885870/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db19c3c5-15e4-5e2e-b4c1-bbe724d8094d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://5dov6pg7.jadoou.yachts/?ublib=2942e19d-e648-4773-ac5a-ec92c91e64e2",
      "pattern": "[url:value = 'https://5dov6pg7.jadoou.yachts/?ublib=2942e19d-e648-4773-ac5a-ec92c91e64e2']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T12:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885868/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7025ce2-0c37-5bdc-ab0e-9031e804806e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://k7d5sjnk.jadoobet.club/?ublib=cea18345-3e45-4dc5-9d5e-b2cf1d9f8e71",
      "pattern": "[url:value = 'https://k7d5sjnk.jadoobet.club/?ublib=cea18345-3e45-4dc5-9d5e-b2cf1d9f8e71']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T12:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885869/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a28d25c1-23ee-509e-b6f7-0564f96bb8ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bzd7mk6q.parsalip.bio/?ublib=05713f42-f9d4-42b0-b12b-b214ee3822f9",
      "pattern": "[url:value = 'https://bzd7mk6q.parsalip.bio/?ublib=05713f42-f9d4-42b0-b12b-b214ee3822f9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T12:52:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885867/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81130c1c-c238-5604-9738-f21cd2dad4ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zigeoavk.jadoou.click/30db1ecc-d221-497d-96ff-02a27a553918",
      "pattern": "[url:value = 'https://zigeoavk.jadoou.click/30db1ecc-d221-497d-96ff-02a27a553918']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T12:36:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885866/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--634571a1-edb6-5f3d-aa6b-e30331864575",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.133.104:36549/bin.sh",
      "pattern": "[url:value = 'http://123.5.133.104:36549/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T12:29:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885865/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--108f4c33-bde8-590a-a830-c17be693ba4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vzcr.bahigo.casino/7ca83116-6045-48b9-89d9-600b25614c94",
      "pattern": "[url:value = 'https://vzcr.bahigo.casino/7ca83116-6045-48b9-89d9-600b25614c94']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T12:11:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885864/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe0bedbb-c450-5de8-9e61-0c8ae01c5691",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.40.129.155:46621/i",
      "pattern": "[url:value = 'http://39.40.129.155:46621/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:59:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885863/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c34040b-eba2-54ff-8f62-9fa0f074b95e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/arm7",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885855/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b90c4be-3e72-5b15-9141-8792ed33827a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/arm5",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885856/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a17d3b19-e0a0-5655-b413-776d0161c557",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/ppc",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885857/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97adb41c-9e75-59c2-993d-6a0641a25c3f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/arm",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885858/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46d8d061-e5c2-5aaf-9b0c-6f0db1fa04be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/sh4",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885859/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6017caed-1847-5ead-85fe-64d37d6899d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/arc",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885860/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1de478ef-01d8-5b5c-89cf-f07d54e0e53a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org///arm5",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org///arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885861/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--797342fb-2cd4-53b6-9002-eefb3585d477",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/mpsl",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885862/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bd286f7-d9c5-5eb6-a771-5cfec95140ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/x86",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885851/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eaa5d555-0d0e-5e86-a945-6c7a8c4975f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/mips",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885852/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--458c9808-8e98-5df6-b76d-2b0bd43c6676",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/spc",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885853/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ee420e6-9e91-5a32-bd8d-65afda8ef78e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/arm6",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885854/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2efe0811-17a3-57d3-abe9-e0678c15ac80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/x86_64",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885850/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34bdbbdc-fdec-5aa3-9af5-ac42b7c88824",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/i686",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885848/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aca18e0f-ecc1-53fe-b29c-73f580a16f53",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://wifihgu.duckdns.org/m68k",
      "pattern": "[url:value = 'http://wifihgu.duckdns.org/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:56:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885849/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cca23b93-d0a3-58dd-9cc7-c9447893befd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://576m4hgs.jadoobet.click/?ublib=8e0e9e79-9fd9-4add-88d9-36754b1a79d3",
      "pattern": "[url:value = 'https://576m4hgs.jadoobet.click/?ublib=8e0e9e79-9fd9-4add-88d9-36754b1a79d3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885847/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc3088ea-230a-5974-9586-91c6a78150d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://imjbwe71.jadoou.xyz/?ublib=2fcdccc0-9442-4581-8f0a-e9c1d2c4187a",
      "pattern": "[url:value = 'https://imjbwe71.jadoou.xyz/?ublib=2fcdccc0-9442-4581-8f0a-e9c1d2c4187a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:54:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885846/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a78206e9-59bb-5f7d-b67f-ccb531e149c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.140/files/8079848160/5cPfAMH.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/8079848160/5cPfAMH.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:44:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885845/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ff86c41-190b-5a6e-9071-dc1c77ca3603",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lqljywai.jadoou.christmas/66f64986-340d-4be7-8c4b-2f6e5fd4d3ec",
      "pattern": "[url:value = 'https://lqljywai.jadoou.christmas/66f64986-340d-4be7-8c4b-2f6e5fd4d3ec']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:43:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885844/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--330d41e1-9f13-512d-bdce-e16f564b4d05",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.226.69.32:57626/i",
      "pattern": "[url:value = 'http://42.226.69.32:57626/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:34:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885843/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bba1052a-f394-5f39-82d5-f85b69b285b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.89.129:36645/i",
      "pattern": "[url:value = 'http://110.37.89.129:36645/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:28:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885842/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ef2b866-f8ae-55bf-ae51-7765342f3779",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zxx1gpmw.pars90.download/?ublib=064f99d4-76a2-4eea-9e0e-56421ee3d280",
      "pattern": "[url:value = 'https://zxx1gpmw.pars90.download/?ublib=064f99d4-76a2-4eea-9e0e-56421ee3d280']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885841/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb12048a-7beb-5688-b0be-7aa9ef59261f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.216.199.130:36784/i",
      "pattern": "[url:value = 'http://27.216.199.130:36784/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T11:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885840/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d13ccec2-7471-5059-8388-7121637d1ceb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ovcvaphj.jadoou.cfd/1db42ea1-b1e4-4362-a6a2-401372c0a395",
      "pattern": "[url:value = 'https://ovcvaphj.jadoou.cfd/1db42ea1-b1e4-4362-a6a2-401372c0a395']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885839/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5eeb41d-2986-50af-8716-6c91d35a3314",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.215.23.95:55729/i",
      "pattern": "[url:value = 'http://60.215.23.95:55729/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:45:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885838/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4177a4dd-0cd4-53b0-8ad0-591119a9b9ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zxco.madgal.life/616c555d-6508-42f9-a266-2ba19cdef127",
      "pattern": "[url:value = 'https://zxco.madgal.life/616c555d-6508-42f9-a266-2ba19cdef127']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:38:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885837/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c45bbbeb-e1bd-52ba-9a60-8d117f36330f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.105.160:39775/i",
      "pattern": "[url:value = 'http://182.121.105.160:39775/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885836/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd4a6272-9c8b-549d-8137-3931196f86eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.207.196.86/all.sh",
      "pattern": "[url:value = 'http://45.207.196.86/all.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:02:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885835/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c49f6583-3063-5eb0-a118-4f262fe02b5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://193.177.220.9/36/greatideadscomingwithbetterwaystobe.hta",
      "pattern": "[url:value = 'http://193.177.220.9/36/greatideadscomingwithbetterwaystobe.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885829/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4fb80c2-56ac-5a48-8ff4-6ff33d89aad1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://193.177.220.9/70/bestnetowrkingskillforbetterplaceformebetter.hta",
      "pattern": "[url:value = 'http://193.177.220.9/70/bestnetowrkingskillforbetterplaceformebetter.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885830/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bac05ebb-d713-5600-9665-5fd62d5b9f9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://193.177.220.9/13/goodthingsarebestforbetterpeoples.hta",
      "pattern": "[url:value = 'http://193.177.220.9/13/goodthingsarebestforbetterpeoples.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885831/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25140890-971d-5a99-9d1c-e9670d09e90f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.44.156.79/15/givemebestthings.hta",
      "pattern": "[url:value = 'http://64.44.156.79/15/givemebestthings.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885832/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3335da3-3d4d-58a6-a912-91e3f105c4ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.44.156.79/15/img_052816.png",
      "pattern": "[url:value = 'http://64.44.156.79/15/img_052816.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885833/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f39cdb03-c6a3-5b63-bcd3-e5836c591239",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://193.177.220.9/60/wereturntothegamewithbestpeoplesmarking.hta",
      "pattern": "[url:value = 'http://193.177.220.9/60/wereturntothegamewithbestpeoplesmarking.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885834/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db6ced9a-5bb7-59ea-8040-d57f7f528524",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://5ufm19dl.pdfbama.com/?ublib=f0a96d5f-e04e-4681-a5c9-ba9d89fd9085",
      "pattern": "[url:value = 'https://5ufm19dl.pdfbama.com/?ublib=f0a96d5f-e04e-4681-a5c9-ba9d89fd9085']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:55:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885828/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d05900d-5b3f-51db-8ada-90c4225ad1b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qcancmnq.jadoou.store/4d64f004-5d6b-4488-aebe-70eb2a743f52",
      "pattern": "[url:value = 'https://qcancmnq.jadoou.store/4d64f004-5d6b-4488-aebe-70eb2a743f52']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:52:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885827/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b051de5e-12db-5ce1-af60-a7254734c424",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vfld.jadoou.my/57f4b136-b251-4f84-9cde-a704fd972d86",
      "pattern": "[url:value = 'https://vfld.jadoou.my/57f4b136-b251-4f84-9cde-a704fd972d86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:33:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885826/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a69c551-7966-5c3c-abb8-540e83c5407a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.187.249.1:52457/i",
      "pattern": "[url:value = 'http://119.187.249.1:52457/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:31:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885825/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96fd32c5-f8e5-5ec0-abd0-f054947b7034",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nightmare-cheats.vip/NMLoader%20v%204.2.1.zip",
      "pattern": "[url:value = 'https://nightmare-cheats.vip/NMLoader%20v%204.2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885824/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28f44517-c68a-5ef9-9a0c-bb27449edf6a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://93.177.151.72:41198/i",
      "pattern": "[url:value = 'http://93.177.151.72:41198/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:12:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885823/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2714c8c-5987-5571-abb7-547b484e7905",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.105.160:39775/bin.sh",
      "pattern": "[url:value = 'http://182.121.105.160:39775/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:11:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885822/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b64d7551-66ac-50a6-aeaa-5e6e6ad9a2b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.114.107:37210/i",
      "pattern": "[url:value = 'http://115.61.114.107:37210/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T09:08:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885821/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3863e0db-b081-53b4-9c1f-e1c8bc5152ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.41.3.43:57288/bin.sh",
      "pattern": "[url:value = 'http://125.41.3.43:57288/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:56:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885820/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3b1ffae-92d9-5184-ac49-392335139f69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zjyozhki.jadoou.space/47db3ff9-a24b-4fcc-8a59-e2aff502acaf",
      "pattern": "[url:value = 'https://zjyozhki.jadoou.space/47db3ff9-a24b-4fcc-8a59-e2aff502acaf']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:55:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885819/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ee8a6c4-bf3f-5a29-af72-a887b6b5d89d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.236.156:52227/i",
      "pattern": "[url:value = 'http://105.184.236.156:52227/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:47:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885818/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d42287ec-1ce1-5b38-8b70-4e52abf4f9ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.114.107:37210/bin.sh",
      "pattern": "[url:value = 'http://115.61.114.107:37210/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:43:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885817/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49910f4b-55e8-5aca-b4a9-857248db06c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.15.119.53:44457/i",
      "pattern": "[url:value = 'http://85.15.119.53:44457/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:43:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885816/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9ed70c1-e191-518f-b315-4f73ea5cf85a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.148.225.193:43983/i",
      "pattern": "[url:value = 'http://123.148.225.193:43983/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:36:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885815/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a77864ca-d7ac-5bec-8df4-9065c6034a29",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gcyp.jadoou.monster/063f81aa-2266-4040-a7e0-a4272a0022cc",
      "pattern": "[url:value = 'https://gcyp.jadoou.monster/063f81aa-2266-4040-a7e0-a4272a0022cc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:36:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885814/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6ae6ebf-2d4e-5b61-a5bd-b4f0b67f1ec4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cacbvgql.jadoou.skin/11ef4ad0-d374-4c42-b3de-78edbed055bb",
      "pattern": "[url:value = 'https://cacbvgql.jadoou.skin/11ef4ad0-d374-4c42-b3de-78edbed055bb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T08:00:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885813/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6ee72fd-5dc5-53e2-8aa6-5508268c9a30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_84ca8e9dc36d005a.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_84ca8e9dc36d005a.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:55:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885812/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--873c41f2-4bb5-59cc-b4b5-4b5efd95ea4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy/mips",
      "pattern": "[url:value = 'http://205.237.110.232/proxy/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:54:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885811/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9505a052-3d75-5b00-ab1a-9a8415913327",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy/mpsl",
      "pattern": "[url:value = 'http://205.237.110.232/proxy/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885810/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ed12af-d6fa-569f-8451-6219fa1bbda7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxyarm",
      "pattern": "[url:value = 'http://205.237.110.232/proxyarm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885806/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05b3fd45-b298-55df-bb25-e1b4ffb0e4dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy/arm7",
      "pattern": "[url:value = 'http://205.237.110.232/proxy/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885807/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8be7d560-83f4-5538-b287-aa91ead0f16a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy/x86",
      "pattern": "[url:value = 'http://205.237.110.232/proxy/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885808/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e7cdbdd-578a-5c16-b193-b96ec52612e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy/arm5",
      "pattern": "[url:value = 'http://205.237.110.232/proxy/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885809/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b51d948-0681-5e93-aced-5885ae53eb0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy/arm",
      "pattern": "[url:value = 'http://205.237.110.232/proxy/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885805/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11e3d622-ee9f-5b00-b045-db5ec6ddee28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy/aarch64",
      "pattern": "[url:value = 'http://205.237.110.232/proxy/aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885804/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ace514f9-5dce-5a9e-8007-c39851730be4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/proxy232/mips",
      "pattern": "[url:value = 'http://205.237.110.232/proxy232/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885803/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a27b239-0612-53b5-8003-a277f524cf68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fahv2h6l.kimimaro-trance.com/?ublib=c8d50516-54c8-4b87-a3b1-0428854f1042",
      "pattern": "[url:value = 'https://fahv2h6l.kimimaro-trance.com/?ublib=c8d50516-54c8-4b87-a3b1-0428854f1042']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:53:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885802/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a511a018-dd7c-567a-9adb-4c256ee90e20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/ftr.bin",
      "pattern": "[url:value = 'http://31.77.168.180:5000/ftr.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:41:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885801/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c84b5869-1230-58e1-a602-fb9b31680526",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/babauster.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/babauster.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885800/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e36db28c-c4fc-548e-9f27-5d353d106d45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/wbozon.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/wbozon.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885799/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bd1ec76-6f95-5e05-b4ef-cd64c41e1b43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/ntmyebewekca.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/ntmyebewekca.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885797/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90416dc1-a6c6-5d11-8fe2-cf1af2e251e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/soltwo.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/soltwo.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885798/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9238ba43-0cdc-5024-bd87-9ffa74692886",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/first.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/first.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885789/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af4e5d13-7fe8-593e-91eb-f95e6663e38a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/piva.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/piva.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885790/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58ca0c04-4c1b-521f-8bdc-26fc7b1a0739",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/refac.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/refac.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885791/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84cbaf47-cb9e-55c0-8127-e780f7d4f983",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/sosermasn.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/sosermasn.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885792/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--135beec1-a053-5605-8b75-2bd3b6162474",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/umvbr.bin",
      "pattern": "[url:value = 'http://31.77.168.180:5000/umvbr.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885793/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70fe08df-7e77-575a-a96c-5227f2d10e45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/bkrs.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/bkrs.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885794/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1628c8bb-e2bb-52e6-9389-81aaed4f3328",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/porlonert.bin",
      "pattern": "[url:value = 'http://31.77.168.180:5000/porlonert.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885795/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09983a0f-254b-50a3-93db-a4f2049c01d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.77.168.180:5000/repapa.exe",
      "pattern": "[url:value = 'http://31.77.168.180:5000/repapa.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885796/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e3633e0-9341-5e18-bc63-244eff8e4af3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.54.168.65:34275/bin.sh",
      "pattern": "[url:value = 'http://115.54.168.65:34275/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:39:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885788/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0913bf4d-a94a-5211-97b1-2c24b0d496b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.196.129:40076/i",
      "pattern": "[url:value = 'http://182.119.196.129:40076/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:37:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885787/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0ae420a-e748-5b71-88dc-9a32da2fab22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tkhf.jadoou.mom/60a3f216-d234-4ead-9e65-8daadeb9cd58",
      "pattern": "[url:value = 'https://tkhf.jadoou.mom/60a3f216-d234-4ead-9e65-8daadeb9cd58']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:33:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885786/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68657de5-ea23-5305-a37d-5a08d8db9a9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://frqljktr.jadoou.site/b8a7601f-d076-4287-b05f-0d4b7b21e27e",
      "pattern": "[url:value = 'https://frqljktr.jadoou.site/b8a7601f-d076-4287-b05f-0d4b7b21e27e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:08:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885785/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff17f89c-c207-5d08-acc4-af1149a43508",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.189.198.193:36412/i",
      "pattern": "[url:value = 'http://196.189.198.193:36412/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T07:00:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885784/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--742b4799-c947-5508-b559-bb455343beed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.235.144.196:35570/i",
      "pattern": "[url:value = 'http://42.235.144.196:35570/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:55:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885783/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86d75b26-d239-5139-801f-9493030dd32d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://byagqv8a.fileboroo.com/?ublib=24901cc9-f3c6-4c2f-8e81-2458d20e816d",
      "pattern": "[url:value = 'https://byagqv8a.fileboroo.com/?ublib=24901cc9-f3c6-4c2f-8e81-2458d20e816d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:55:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885782/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e4b882a-e243-5e8d-ae01-c68301fa38be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.189.198.193:36412/bin.sh",
      "pattern": "[url:value = 'http://196.189.198.193:36412/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:38:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885781/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87989ce6-74fa-58bb-9202-c317fd693daa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mlbn.jadoou.makeup/d9a04cde-d015-470b-a51f-75ab154a1462",
      "pattern": "[url:value = 'https://mlbn.jadoou.makeup/d9a04cde-d015-470b-a51f-75ab154a1462']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:31:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885780/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef35df58-fff4-541b-b491-2dbe35f6fcab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://77.79.160.210:51525/i",
      "pattern": "[url:value = 'http://77.79.160.210:51525/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:22:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885779/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba788baa-954d-5320-87b0-06ee2ee58b14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sth4xz5f.pacificcrestforaging.com/?ublib=24006556-f831-4f6e-ac02-922fcafa7d3f",
      "pattern": "[url:value = 'https://sth4xz5f.pacificcrestforaging.com/?ublib=24006556-f831-4f6e-ac02-922fcafa7d3f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885778/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a774fb44-8251-5ad2-a78f-be566d1de484",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gogolfonline.com/zira-miszsn.exe",
      "pattern": "[url:value = 'https://gogolfonline.com/zira-miszsn.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:12:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885777/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c442bd70-78a4-598b-9f06-eb15e86efbac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://77.79.160.210:51525/bin.sh",
      "pattern": "[url:value = 'http://77.79.160.210:51525/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:09:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885776/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0654ef22-e4fa-561c-b896-d8c9b03730d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://knihrdel.jadoou.shop/1f9c07a6-6ceb-4e3b-a4c9-70e2cb0bfa38",
      "pattern": "[url:value = 'https://knihrdel.jadoou.shop/1f9c07a6-6ceb-4e3b-a4c9-70e2cb0bfa38']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:09:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885775/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff716ee1-8dc2-53f6-b64b-895acef73a12",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.59.119.187:37559/bin.sh",
      "pattern": "[url:value = 'http://42.59.119.187:37559/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:06:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885774/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eeb155a-4286-5f7e-8310-e6021a4dae62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-6bb84612f1aa422e987506bd70a6550c.r2.dev/HCUQAUTJ.msi",
      "pattern": "[url:value = 'https://pub-6bb84612f1aa422e987506bd70a6550c.r2.dev/HCUQAUTJ.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:05:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885773/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af9a9662-f231-53af-8814-0bfa31853683",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.x86_64",
      "pattern": "[url:value = 'http://141.11.88.119/dg.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885759/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02f19f85-be96-58a0-9930-8e8c26a098e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.aarch64",
      "pattern": "[url:value = 'http://141.11.88.119/dg.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885760/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd279087-212e-5827-af1c-b88cc9d56fa2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.mipsel",
      "pattern": "[url:value = 'http://141.11.88.119/dg.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885761/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f25bbf1-8c32-5582-8d0c-77cb1f5d0bbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.powerpc",
      "pattern": "[url:value = 'http://141.11.88.119/dg.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885762/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bc2b715-5178-5d0c-bdc3-157fed385b77",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.armv4l",
      "pattern": "[url:value = 'http://141.11.88.119/dg.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885763/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f4e2724-db03-5707-8c6e-eadc98ed0173",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.sparc",
      "pattern": "[url:value = 'http://141.11.88.119/dg.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885764/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3d1f1ac-7195-5653-b025-97d464ee51ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.sh4",
      "pattern": "[url:value = 'http://141.11.88.119/dg.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885765/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5214b7a-f2c5-506a-ae3b-63192e2f6c96",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.mipsrouter",
      "pattern": "[url:value = 'http://141.11.88.119/dg.mipsrouter']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885766/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--212fd7c5-dfc7-58f6-b080-a5a4f2334170",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.armv5l",
      "pattern": "[url:value = 'http://141.11.88.119/dg.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885767/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44af8eff-b50a-51a1-8a10-84da12ff38b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.armv7l",
      "pattern": "[url:value = 'http://141.11.88.119/dg.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885768/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f81344b3-6760-53e7-bfad-5cc4a57ea520",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.i486",
      "pattern": "[url:value = 'http://141.11.88.119/dg.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885769/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c331692-37e6-598d-80e1-2e59fa08f702",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.m68k",
      "pattern": "[url:value = 'http://141.11.88.119/dg.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885770/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a912950-7859-5c39-94f2-e677b3cc1c40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.arc",
      "pattern": "[url:value = 'http://141.11.88.119/dg.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885771/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fb29c77-8e11-525f-bbfb-d9763a10cb2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.119/dg.armv6l",
      "pattern": "[url:value = 'http://141.11.88.119/dg.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885772/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb784d6f-70b0-5713-bad0-5cb15169c35c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.167/nLZQ1kMfpqUTJofiP",
      "pattern": "[url:value = 'http://85.239.149.167/nLZQ1kMfpqUTJofiP']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885757/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--709eb92d-0daf-5a69-87ca-9d97d1329178",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fairth.dev/Fairth.zip",
      "pattern": "[url:value = 'https://fairth.dev/Fairth.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885758/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20ac6139-3c46-5014-a0bc-14c4a177b492",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://www.dropbox.com/scl/fi/87ikws7x5qn2p1ogczanv/unitymanager.exe?rlkey=tp4t2v1llj60fopadmv63zx1n&st=1feetr0p&e=1&dl=1",
      "pattern": "[url:value = 'https://www.dropbox.com/scl/fi/87ikws7x5qn2p1ogczanv/unitymanager.exe?rlkey=tp4t2v1llj60fopadmv63zx1n&st=1feetr0p&e=1&dl=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:04:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885756/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cecbb4e-b4e8-5e37-8f28-4dc2d2d4f719",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nightmare-download.pw/NMLoader%20v%204.2.1.zip",
      "pattern": "[url:value = 'https://nightmare-download.pw/NMLoader%20v%204.2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885755/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c87c7f2a-663b-5698-8f91-8978acca3e8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_77b5757ae75eb20b.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_77b5757ae75eb20b.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:03:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885754/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9f941f4-90ab-5564-956a-9b84e670bc80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://151.247.22.48:8080/bins/payload.sh",
      "pattern": "[url:value = 'http://151.247.22.48:8080/bins/payload.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T06:03:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885753/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfa49c51-9b52-52de-bfde-eb9bcb8509e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xc1y2oam.jetbet.download/?ublib=2a0a4211-ae80-4d54-a77e-c5e04e044848",
      "pattern": "[url:value = 'https://xc1y2oam.jetbet.download/?ublib=2a0a4211-ae80-4d54-a77e-c5e04e044848']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:53:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885752/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efad8d65-ff68-51eb-b5e6-7e09099b358a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.55.84:51036/i",
      "pattern": "[url:value = 'http://110.37.55.84:51036/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:45:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885751/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2584569b-9e7a-5fa9-8270-99db2e248d40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ahkx.jadoou.lol/5c479e97-397b-4074-a7e4-d80c37dd6be7",
      "pattern": "[url:value = 'https://ahkx.jadoou.lol/5c479e97-397b-4074-a7e4-d80c37dd6be7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885750/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d539a863-1945-5860-95b3-66d1a22c6f6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://124.131.129.41:41802/i",
      "pattern": "[url:value = 'http://124.131.129.41:41802/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:33:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885749/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ab13967-9940-5482-ac74-2d2767364c25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.59.119.187:37559/i",
      "pattern": "[url:value = 'http://42.59.119.187:37559/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885748/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e019f4e0-5a5c-5090-ac16-336eb1b66968",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pqxhifiu.jadoou.sbs/3f80625e-0815-4bcf-aad9-fe261f52fc51",
      "pattern": "[url:value = 'https://pqxhifiu.jadoou.sbs/3f80625e-0815-4bcf-aad9-fe261f52fc51']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:14:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885747/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--006634a7-7fd8-56bb-bcf1-2b0e052399aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.55.84:51036/bin.sh",
      "pattern": "[url:value = 'http://110.37.55.84:51036/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:13:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885746/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a5b4476-79e7-50d0-8ee1-9ebefd6406bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://124.131.129.41:41802/bin.sh",
      "pattern": "[url:value = 'http://124.131.129.41:41802/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:11:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885745/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64396e26-fa21-521f-ac64-17381b42193a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.117.244.27:40750/i",
      "pattern": "[url:value = 'http://119.117.244.27:40750/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:05:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885744/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--430e2d8a-cf1d-58d7-9912-1cda97794f0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.141.35:38742/i",
      "pattern": "[url:value = 'http://59.96.141.35:38742/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T05:02:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885743/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--089e52d4-f9b8-5ba0-9da5-2354d02f5ca9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.160.48:43979/i",
      "pattern": "[url:value = 'http://115.55.160.48:43979/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:57:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885742/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0cf3ca0-7677-53c9-b955-449fa8ad0cde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.226.70.199:34323/i",
      "pattern": "[url:value = 'http://42.226.70.199:34323/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885741/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4491104-0e7b-5e69-8f39-a89468d84e2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.126.24:54255/i",
      "pattern": "[url:value = 'http://27.215.126.24:54255/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885740/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--450d757d-fae6-5502-ab43-cc3a3bf3b9b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.117.244.27:40750/bin.sh",
      "pattern": "[url:value = 'http://119.117.244.27:40750/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:32:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885739/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74c2de90-ce0f-56ab-8894-f2b0288b4ce2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pbcx.jadoou.lat/e2a8eae8-9e7b-41af-87db-2de8fb118e0f",
      "pattern": "[url:value = 'https://pbcx.jadoou.lat/e2a8eae8-9e7b-41af-87db-2de8fb118e0f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:32:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885738/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c8083ce-27cc-58d0-bfcc-bf86cc2b9b4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.160.48:43979/bin.sh",
      "pattern": "[url:value = 'http://115.55.160.48:43979/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:31:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885737/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27479476-9af0-574e-96c4-ca425c828f72",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.141.35:38742/bin.sh",
      "pattern": "[url:value = 'http://59.96.141.35:38742/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:30:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885736/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6969154c-014d-5e54-9e2e-f714fec0d15c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ajkcsyzc.jadoou.online/099a692e-342d-4532-8be1-56d7c828a812",
      "pattern": "[url:value = 'https://ajkcsyzc.jadoou.online/099a692e-342d-4532-8be1-56d7c828a812']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:16:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885735/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--122ed23e-02e0-5a23-a0db-1e0c3832ea7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.53.93.69:53346/i",
      "pattern": "[url:value = 'http://61.53.93.69:53346/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T04:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885734/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37014218-2de1-5bb5-bfe6-b239c282dae9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://n85e216p.jadoou.yachts/?ublib=a0aba99a-0e36-4c7a-8c42-65707a9ae3e3",
      "pattern": "[url:value = 'https://n85e216p.jadoou.yachts/?ublib=a0aba99a-0e36-4c7a-8c42-65707a9ae3e3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T03:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885733/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--811b7652-6bae-54b1-8eae-4a2ec6821859",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://124.135.10.58:51825/i",
      "pattern": "[url:value = 'http://124.135.10.58:51825/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T03:38:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885732/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4312e169-3a07-59ab-a40a-3605f8a3a6e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.48.54:39132/i",
      "pattern": "[url:value = 'http://27.215.48.54:39132/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T03:36:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885731/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1720b49-3071-5c39-ad1e-3faa596985c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://viuc.jadoou.icu/2ea55e65-9381-448c-83ae-b586ecb21725",
      "pattern": "[url:value = 'https://viuc.jadoou.icu/2ea55e65-9381-448c-83ae-b586ecb21725']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T03:31:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885730/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--698cdc72-b1e8-54ee-838e-e37d2a938696",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kclujyvd.jadoou.one/8a37023d-da5e-4cd1-afa2-30e4cf93a223",
      "pattern": "[url:value = 'https://kclujyvd.jadoou.one/8a37023d-da5e-4cd1-afa2-30e4cf93a223']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T03:23:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885729/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92dc9fc1-104d-571f-9cb6-49283af1ed59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.207.247.52:58330/i",
      "pattern": "[url:value = 'http://27.207.247.52:58330/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T03:16:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885728/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fcf07df-61e0-5f72-b044-7e1712a4b8ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.40.139:48827/i",
      "pattern": "[url:value = 'http://61.52.40.139:48827/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:59:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885727/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b3e50b0-310b-5a50-ae99-32968bedeeb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.173.158:58649/i",
      "pattern": "[url:value = 'http://182.121.173.158:58649/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:52:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885726/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b992ac8-c98c-53fe-b4ff-65388c1ef9ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.54.75:33198/i",
      "pattern": "[url:value = 'http://115.50.54.75:33198/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:52:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885725/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3640ef8-0cde-5e06-8337-bf4779c020e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.3.201:35761/i",
      "pattern": "[url:value = 'http://110.36.3.201:35761/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:47:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885724/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c20a60d3-f01d-5d19-9e41-3295aa14749d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.40.139:48827/bin.sh",
      "pattern": "[url:value = 'http://61.52.40.139:48827/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:46:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885723/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4130f28c-a0af-5e56-b436-43012bd0e852",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://klsv.betturkey.bet/4b942d50-0dbb-40cb-a21e-ea0da5fca9a2",
      "pattern": "[url:value = 'https://klsv.betturkey.bet/4b942d50-0dbb-40cb-a21e-ea0da5fca9a2']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:34:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885722/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb3e3a05-fe1e-566b-9805-fec623fb6b92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vspzxyds.jadoobet.info/525bfad0-1f3b-42b4-80cd-9d82a22c5e41",
      "pattern": "[url:value = 'https://vspzxyds.jadoobet.info/525bfad0-1f3b-42b4-80cd-9d82a22c5e41']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885721/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fe72b24-2116-5954-bc1c-9162730f65ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.133.104:36549/i",
      "pattern": "[url:value = 'http://123.5.133.104:36549/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:20:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885720/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53e53486-73a4-5f96-bed6-37369a9650bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.148.188.53:43457/i",
      "pattern": "[url:value = 'http://123.148.188.53:43457/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:18:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885719/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64a91126-6f71-58e6-a834-c96425e8bd3f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.211.69.105:35453/i",
      "pattern": "[url:value = 'http://60.211.69.105:35453/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:17:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885718/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d02b177-d065-5180-a18c-e21f4d4eaa6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.200.219.239:44866/bin.sh",
      "pattern": "[url:value = 'http://221.200.219.239:44866/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T02:02:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885717/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66ed6c2c-b89f-5877-a288-be643897abf5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ceayo90m.jadoou.xyz/?ublib=36675b49-9aef-464d-b4ef-fe27adb7c757",
      "pattern": "[url:value = 'https://ceayo90m.jadoou.xyz/?ublib=36675b49-9aef-464d-b4ef-fe27adb7c757']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885716/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c14319fc-f1de-5f9f-95b6-5da83b29a4c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://7c7ax36p.bahigo90bet.com/?ublib=384f03ab-b276-4128-84bb-e88b0579c723",
      "pattern": "[url:value = 'https://7c7ax36p.bahigo90bet.com/?ublib=384f03ab-b276-4128-84bb-e88b0579c723']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:52:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885715/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d44f4686-7406-54f0-b759-377980ff7432",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.148.188.53:43457/bin.sh",
      "pattern": "[url:value = 'http://123.148.188.53:43457/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:51:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885714/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4abc976c-9ce5-53ab-a2c6-8e47de4ea0fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.211.69.105:35453/bin.sh",
      "pattern": "[url:value = 'http://60.211.69.105:35453/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885713/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--deb6bde0-cb72-53eb-986c-c64065828089",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.138.108.37:45572/i",
      "pattern": "[url:value = 'http://119.138.108.37:45572/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:36:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885712/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--509e9a3d-a3cf-5a35-8705-8b0df2802c00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ogedjbqx.jadoou.baby/44fa5a15-5232-4bb8-8177-1bd070c574da",
      "pattern": "[url:value = 'https://ogedjbqx.jadoou.baby/44fa5a15-5232-4bb8-8177-1bd070c574da']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:30:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885710/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0642391e-3046-5dd7-8677-36e1903fd834",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://exlt.behtarin-site-shartbandi.com/8fdf126b-4719-4113-924f-640e934e5c20",
      "pattern": "[url:value = 'https://exlt.behtarin-site-shartbandi.com/8fdf126b-4719-4113-924f-640e934e5c20']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:30:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885711/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b60865f9-3486-51b8-9b69-11b525664f66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.120.14.6:54946/i",
      "pattern": "[url:value = 'http://182.120.14.6:54946/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885709/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7fb2ef5-ed67-5d84-a1c3-899a22ea49b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.201.178.212:33823/i",
      "pattern": "[url:value = 'http://115.201.178.212:33823/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:20:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885708/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--662e6222-c6fb-5d11-90a1-f566f13b8617",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.138.108.37:45572/bin.sh",
      "pattern": "[url:value = 'http://119.138.108.37:45572/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:11:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885707/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cca1929-48cf-50f7-8a89-99286efc0fc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.121:59253/bin.sh",
      "pattern": "[url:value = 'http://200.112.129.121:59253/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T01:11:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885706/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ce931d3-003a-5adb-bb15-8b86f1e1ccb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.201.178.212:33823/bin.sh",
      "pattern": "[url:value = 'http://115.201.178.212:33823/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:58:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885705/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e63efce3-a137-57fe-837b-3459547eef99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.254.82:54025/i",
      "pattern": "[url:value = 'http://42.224.254.82:54025/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:47:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885704/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e169c27a-90df-5db5-9da2-3016e6180892",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.137.148.215:33410/i",
      "pattern": "[url:value = 'http://61.137.148.215:33410/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:41:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885703/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8215a2fb-d587-5a51-a2a0-911b359eb37b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://yjrbnmoc.casinomhub.bet/e2dcdfd9-87b6-46ff-a2bc-dc36dd6051c6",
      "pattern": "[url:value = 'https://yjrbnmoc.casinomhub.bet/e2dcdfd9-87b6-46ff-a2bc-dc36dd6051c6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:36:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885702/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bc66b5e-4c15-527f-8e8a-d33e331e628a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.120.14.6:54946/bin.sh",
      "pattern": "[url:value = 'http://182.120.14.6:54946/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:31:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885701/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb7acffa-49ab-5c53-b0e9-afef24504b5e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kcpj.bahigo.casino/b996488d-e070-4604-9951-a635e5f672f7",
      "pattern": "[url:value = 'https://kcpj.bahigo.casino/b996488d-e070-4604-9951-a635e5f672f7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885700/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dddd1907-ba84-5c61-a9ab-bf7b13d18199",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.254.82:54025/bin.sh",
      "pattern": "[url:value = 'http://42.224.254.82:54025/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:21:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885699/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fba8cf62-7ec8-5e75-a8cd-851128ac7022",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.137.148.215:33410/bin.sh",
      "pattern": "[url:value = 'http://61.137.148.215:33410/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885698/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43282cb1-13b0-54a9-bd7c-1a4d1ac84457",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.65.231:42876/i",
      "pattern": "[url:value = 'http://110.37.65.231:42876/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:12:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885697/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb40c8a2-7abd-5ffb-ac00-808dd0532525",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.13.105.115:60245/i",
      "pattern": "[url:value = 'http://123.13.105.115:60245/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:10:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885696/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea53d680-2727-54ea-bec1-88f641d1bd81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.58.83.71:49039/bin.sh",
      "pattern": "[url:value = 'http://115.58.83.71:49039/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:06:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885695/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cecdf830-64b1-5f43-b3d4-cc4d002a197c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.120.207:41031/bin.sh",
      "pattern": "[url:value = 'http://182.126.120.207:41031/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-13T00:05:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885694/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--871019c8-32b1-56fc-aee4-3eb9ef0e2741",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://uwrt8xqz.jadoou.cfd/?ublib=a38dd917-aa94-464e-986a-94e82412ae1d",
      "pattern": "[url:value = 'https://uwrt8xqz.jadoou.cfd/?ublib=a38dd917-aa94-464e-986a-94e82412ae1d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885693/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--815e2b30-f7f8-59dc-b1e6-2a422378b203",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.161.205:39646/bin.sh",
      "pattern": "[url:value = 'http://115.48.161.205:39646/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:51:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885692/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef19b369-cf1e-53e1-8a97-dca7c24c1bf3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.255.92:34611/i",
      "pattern": "[url:value = 'http://115.57.255.92:34611/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:47:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885691/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--741ea214-d243-544f-8548-86b93154f6be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.65.231:42876/bin.sh",
      "pattern": "[url:value = 'http://110.37.65.231:42876/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:45:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885690/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26efc999-f6e3-5d9e-bde8-65d68f057118",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.114.198.221:59360/i",
      "pattern": "[url:value = 'http://182.114.198.221:59360/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:42:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885689/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f4d3c63-641f-524c-b1f3-2bbdd4514b93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://acthktpb.betropol.bet/3f0258fa-a6ca-4dd4-b331-36ff6971fdea",
      "pattern": "[url:value = 'https://acthktpb.betropol.bet/3f0258fa-a6ca-4dd4-b331-36ff6971fdea']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:39:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885688/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51e6fd0b-2514-5833-86cb-d33e57e6fb58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vwhp.betpublic.casino/66f5aef2-b751-4b93-84e0-d5dbbf4cc32b",
      "pattern": "[url:value = 'https://vwhp.betpublic.casino/66f5aef2-b751-4b93-84e0-d5dbbf4cc32b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:28:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885687/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--342a4b4c-3f21-57ae-8e8d-dc4abfe85cc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.120.207:41031/i",
      "pattern": "[url:value = 'http://182.126.120.207:41031/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:26:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885686/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e007f2-6a33-549d-b21a-ea7bee12b691",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.15.97:58671/i",
      "pattern": "[url:value = 'http://221.15.15.97:58671/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:20:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885685/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e0e35ae-ff27-5587-98c2-bc7547e495ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.255.92:34611/bin.sh",
      "pattern": "[url:value = 'http://115.57.255.92:34611/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:19:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885684/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3d6251c-aff2-594e-b8d3-0b663ed6677e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.109.211.19:58395/i",
      "pattern": "[url:value = 'http://112.109.211.19:58395/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:12:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885683/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--863421d3-0de9-56b2-9eb2-18a0a17b0726",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.228.60.185:57485/bin.sh",
      "pattern": "[url:value = 'http://112.228.60.185:57485/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:08:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885682/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0a97eaf-6b53-5f3e-9b68-af04f7c60896",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.68.106:39865/i",
      "pattern": "[url:value = 'http://110.37.68.106:39865/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:07:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885681/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78168f22-80cd-50c6-8b16-a6ce274c6bd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.68.106:39865/bin.sh",
      "pattern": "[url:value = 'http://110.37.68.106:39865/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:02:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885680/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1078964-28b4-56d9-be04-9e370a24bda2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.36.189.153:44919/i",
      "pattern": "[url:value = 'http://27.36.189.153:44919/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T23:02:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885679/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93e74e06-5d7f-5cfe-86cf-7902fe16f131",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sidnxgci.radioshartbandi.bet/34dfdaac-6e8b-4814-a595-c86d8008e464",
      "pattern": "[url:value = 'https://sidnxgci.radioshartbandi.bet/34dfdaac-6e8b-4814-a595-c86d8008e464']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:45:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885678/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--024758a9-f0a9-5f06-811e-54d01e01ff46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.109.211.19:58395/bin.sh",
      "pattern": "[url:value = 'http://112.109.211.19:58395/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:42:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885677/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71be4d0b-7dac-5073-a416-71f394e3e5f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.222.149.160:34087/bin.sh",
      "pattern": "[url:value = 'http://27.222.149.160:34087/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:37:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885676/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aabf9151-a9c6-549d-bbc5-ae4a6afd0c63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cdba.bet90forward.win/7a0bd89b-fdf7-412b-9fe0-ec42423459ba",
      "pattern": "[url:value = 'https://cdba.bet90forward.win/7a0bd89b-fdf7-412b-9fe0-ec42423459ba']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:31:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885675/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d8db415-484b-563b-8ab1-c2800b1688ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.36.189.153:44919/bin.sh",
      "pattern": "[url:value = 'http://27.36.189.153:44919/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:29:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885674/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e366fc6-b2e0-5f8d-8cc0-c97aa5b3fa1d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.155.128.89:54936/i",
      "pattern": "[url:value = 'http://219.155.128.89:54936/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:26:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885673/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef1ef5af-f8f2-5850-9a98-beebbb4eda46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.123.167.134:33188/i",
      "pattern": "[url:value = 'http://182.123.167.134:33188/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:20:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885672/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06e39519-3d06-5e57-9ab8-88fb97d88471",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.179.255.193:59772/i",
      "pattern": "[url:value = 'http://119.179.255.193:59772/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885671/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b73ff61-21d8-576c-82c9-51db903f9017",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.70.189:34474/i",
      "pattern": "[url:value = 'http://110.36.70.189:34474/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885670/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f197cb7c-95d3-5bc6-9e82-0f8cabd8c7c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.179.255.193:59772/bin.sh",
      "pattern": "[url:value = 'http://119.179.255.193:59772/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T22:01:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885669/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7389ff9c-36c1-5067-af4c-4656b714da68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mfej25tu.jadoou.cyou/?ublib=dff13a08-89b2-46d0-9868-46d6143f8fdd",
      "pattern": "[url:value = 'https://mfej25tu.jadoou.cyou/?ublib=dff13a08-89b2-46d0-9868-46d6143f8fdd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885668/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ead36e68-d356-52e7-a775-b8768795e676",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://eikgcqyt.onjabet1.com/0fa92f57-53da-4834-9435-39a98ef9ef36",
      "pattern": "[url:value = 'https://eikgcqyt.onjabet1.com/0fa92f57-53da-4834-9435-39a98ef9ef36']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:48:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885667/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c99ae798-9809-50fa-933a-92f0b17b3a51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fock.bekabet.casino/19add951-f89a-4789-a350-8843bd14acff",
      "pattern": "[url:value = 'https://fock.bekabet.casino/19add951-f89a-4789-a350-8843bd14acff']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:47:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885666/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea595058-b045-5edb-afc5-395251aeacdb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.232.60.189:43190/i",
      "pattern": "[url:value = 'http://112.232.60.189:43190/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:45:56Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885665/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e81adb0-6d54-5a73-b943-c807a4531f76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/spc",
      "pattern": "[url:value = 'http://103.130.215.73/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885660/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c11a3be-cf7b-5652-8850-a7fda4503865",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/i686",
      "pattern": "[url:value = 'http://103.130.215.73/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885661/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b2019da-aabf-5d45-a523-35165ba90ec6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/sh4",
      "pattern": "[url:value = 'http://103.130.215.73/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885662/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe4d3144-d741-557d-8f02-065b7e3407f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/arc",
      "pattern": "[url:value = 'http://103.130.215.73/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885663/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3035d4cf-3cbd-5c75-8749-c31a41231a8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/ppc",
      "pattern": "[url:value = 'http://103.130.215.73/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885664/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6aa0e2ce-d1e7-5761-9b85-3564163bc338",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/x86",
      "pattern": "[url:value = 'http://103.130.215.73/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885657/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46f7ddb8-4414-562e-a6b9-7ab14d93c22a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/m68k",
      "pattern": "[url:value = 'http://103.130.215.73/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885658/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acae6013-e332-52c3-923b-733d46362a3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/mpsl",
      "pattern": "[url:value = 'http://103.130.215.73/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:33:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885659/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96fb258f-a5b2-5992-89a6-a3ecf103e4cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.101.150.244:44968/i",
      "pattern": "[url:value = 'http://59.101.150.244:44968/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:31:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885656/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7aecf90e-bde1-585c-a21c-ffbb246d04c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.206.196.156:47093/i",
      "pattern": "[url:value = 'http://27.206.196.156:47093/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:21:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885655/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39cd3014-d7e0-5a99-ab75-53aa49318423",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.41.76.32:44137/i",
      "pattern": "[url:value = 'http://125.41.76.32:44137/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:20:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885654/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28ace7cc-e732-5321-9631-c04470a3e335",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.206.60.97:39258/i",
      "pattern": "[url:value = 'http://27.206.60.97:39258/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:06:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885653/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c7b24ba-3192-5ef3-98da-66d74f9acf5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.103.116.172:39481/i",
      "pattern": "[url:value = 'http://59.103.116.172:39481/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T21:02:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885652/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22f28221-de08-5056-a616-286dd7e27ff4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sjzcjaqs.jadoou.bond/92d61de1-5eb6-4a30-abe7-4c0e0cf9ce67",
      "pattern": "[url:value = 'https://sjzcjaqs.jadoou.bond/92d61de1-5eb6-4a30-abe7-4c0e0cf9ce67']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:55:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885651/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad5c6bb8-d76a-5af8-90b6-20554abfe545",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mypwk0n2.jadoou.click/?ublib=94d469f0-e55a-45f3-8716-0896b2ac9083",
      "pattern": "[url:value = 'https://mypwk0n2.jadoou.click/?ublib=94d469f0-e55a-45f3-8716-0896b2ac9083']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:53:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885650/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c25dfeda-866d-5313-bf3a-baa3eecd4b97",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.73.184:55553/i",
      "pattern": "[url:value = 'http://123.11.73.184:55553/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885649/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5078ef1-78fb-509f-b17c-981cd48f686f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.206.60.97:39258/bin.sh",
      "pattern": "[url:value = 'http://27.206.60.97:39258/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885648/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a01cfe9b-de8d-5410-ad62-ce0b642b2ef9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.202.243.236:52441/i",
      "pattern": "[url:value = 'http://27.202.243.236:52441/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:29:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885647/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cc688a6-6ae5-5877-b1c8-0b7d22f0898e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jidm.jadoobet.pro/974e10ba-ff8a-43c1-afda-4e452b301c50",
      "pattern": "[url:value = 'https://jidm.jadoobet.pro/974e10ba-ff8a-43c1-afda-4e452b301c50']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:26:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885646/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--228fce92-1a2f-5040-9591-e2ddc030a70a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fdmyrhjq.jadoobet.vip/?ublib=71a1eb2c-6edf-4d1b-82e5-a776631dd5c5",
      "pattern": "[url:value = 'https://fdmyrhjq.jadoobet.vip/?ublib=71a1eb2c-6edf-4d1b-82e5-a776631dd5c5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:08:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885645/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42e174e4-4066-5380-97bd-a0d164baf143",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.176.81:35574/i",
      "pattern": "[url:value = 'http://182.127.176.81:35574/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:06:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885644/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1d17f4f-cdde-5abf-8f7a-bcecb31d4638",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ufdrepkt.jadoou.autos/909c070b-6316-4a87-b17a-a575e312f123",
      "pattern": "[url:value = 'https://ufdrepkt.jadoou.autos/909c070b-6316-4a87-b17a-a575e312f123']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T20:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885643/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a356130-64a6-5b78-9dc2-6ae725792e28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.176.81:35574/bin.sh",
      "pattern": "[url:value = 'http://182.127.176.81:35574/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:49:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885642/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e49c44a3-c039-5fdc-ae03-6fe2f278d065",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://olptz5o4.jadoou.beauty/?ublib=b739174a-8241-4e3c-bf7a-937690ed81cd",
      "pattern": "[url:value = 'https://olptz5o4.jadoou.beauty/?ublib=b739174a-8241-4e3c-bf7a-937690ed81cd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:37:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885641/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc59e004-4011-54b7-8223-60b152012b5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.200.249:50975/i",
      "pattern": "[url:value = 'http://115.49.200.249:50975/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885640/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5824e22c-762d-5ecf-af0c-03901941cc4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jkvw.jadoobet.live/9d1c428c-ab64-43d8-b03c-6e8382f4b0a7",
      "pattern": "[url:value = 'https://jkvw.jadoobet.live/9d1c428c-ab64-43d8-b03c-6e8382f4b0a7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:28:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885639/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5a88f5e-2928-5490-88c5-3866c3757cd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.224.36.90:33119/i",
      "pattern": "[url:value = 'http://105.224.36.90:33119/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:21:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885638/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d074366-67ab-5ce8-9c55-13f1f093af03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.104.206:34529/bin.sh",
      "pattern": "[url:value = 'http://182.121.104.206:34529/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:21:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885637/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acd58157-586f-585c-889a-2062f8f0a395",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.200.249:50975/bin.sh",
      "pattern": "[url:value = 'http://115.49.200.249:50975/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:09:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885636/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20d6f5c7-8a21-56a5-989d-0544842c2558",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.248.253:37744/i",
      "pattern": "[url:value = 'http://115.55.248.253:37744/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:06:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885635/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--264eb27f-ed78-5b40-affb-ba4c6ba5e477",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dudqylyo.jadoou.art/24c6cab9-4624-495c-a44b-0bb256997486",
      "pattern": "[url:value = 'https://dudqylyo.jadoou.art/24c6cab9-4624-495c-a44b-0bb256997486']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T19:04:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885634/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74f9a4f5-6eec-5af7-ad7a-453b04c2e915",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.248.253:37744/bin.sh",
      "pattern": "[url:value = 'http://115.55.248.253:37744/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:46:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885633/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--580d2a1d-6f26-51a2-bdd0-33b98da39614",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.78.250.114:43692/i",
      "pattern": "[url:value = 'http://39.78.250.114:43692/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:27:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885632/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edbcca4c-4a72-5c07-b660-8ccd4a667822",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://snvd.jadoobet.ink/7421ad84-dfc8-4bc9-9f8d-31d9f7f318e8",
      "pattern": "[url:value = 'https://snvd.jadoobet.ink/7421ad84-dfc8-4bc9-9f8d-31d9f7f318e8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:26:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885631/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5525585-881e-5263-9a16-00a1ed484cf4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.93.182:40122/i",
      "pattern": "[url:value = 'http://110.36.93.182:40122/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:24:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885630/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d8efa58-1167-56f5-b46f-ddb280bd2a89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.47.238.195:35702/i",
      "pattern": "[url:value = 'http://125.47.238.195:35702/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:18:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885629/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dd1d8be-db6b-5075-a53e-e52cda58bb15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.186.74.237:54017/i",
      "pattern": "[url:value = 'http://105.186.74.237:54017/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:17:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885628/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--961cec95-8605-5ad2-89a8-682f954acf42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.133.180:56776/i",
      "pattern": "[url:value = 'http://196.190.133.180:56776/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:16:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885627/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a79ab9b9-dbda-5c3a-aa0c-7254e541aaf8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.78.250.114:43692/bin.sh",
      "pattern": "[url:value = 'http://39.78.250.114:43692/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:13:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885626/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28198134-4490-50b6-a24b-2a8815c630df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lwqeujgc.jadoobet.xyz/3dd57329-b411-4742-8eaf-93767659c995",
      "pattern": "[url:value = 'https://lwqeujgc.jadoobet.xyz/3dd57329-b411-4742-8eaf-93767659c995']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T18:07:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885625/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--603bffa8-5acc-5196-a3a5-a82ad08c1be6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://179.49.213.85:33501/i",
      "pattern": "[url:value = 'http://179.49.213.85:33501/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:57:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885624/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d78bfe8-67b6-548a-98b2-1889935afbcc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.229.4:50017/i",
      "pattern": "[url:value = 'http://182.121.229.4:50017/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:52:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885623/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09dac9ef-b33d-5f2e-a1a5-b884a03bcdcc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://azffnyvq.zaribbala.bet/?ublib=5b39e4a8-3f9f-4573-ae6d-2a16a20ca928",
      "pattern": "[url:value = 'https://azffnyvq.zaribbala.bet/?ublib=5b39e4a8-3f9f-4573-ae6d-2a16a20ca928']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:38:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885622/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--428b8e9c-b4bb-5f26-baea-0a8c7cf97cd5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.75.130:51486/i",
      "pattern": "[url:value = 'http://222.141.75.130:51486/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:37:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885621/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--487038f3-81b0-59b8-a2d3-81c008b97426",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.58.83.71:49039/i",
      "pattern": "[url:value = 'http://115.58.83.71:49039/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:34:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885620/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10f47e12-cd26-5a32-a432-0e8a6b079804",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://116.73.133.132:46071/i",
      "pattern": "[url:value = 'http://116.73.133.132:46071/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:31:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885619/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99b88f63-6223-5857-8c41-ebf631cd3477",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.80.229.52:38724/i",
      "pattern": "[url:value = 'http://36.80.229.52:38724/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:31:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885618/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f263e75c-5e4f-5185-8440-77a979045bde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.0.19:40211/i",
      "pattern": "[url:value = 'http://115.49.0.19:40211/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:31:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885617/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--862423fd-c776-5a79-a1e0-574e840d0932",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.229.4:50017/bin.sh",
      "pattern": "[url:value = 'http://182.121.229.4:50017/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:27:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885616/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acc75c41-990e-5fd8-8008-838f09915d91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.75.130:51486/bin.sh",
      "pattern": "[url:value = 'http://222.141.75.130:51486/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:25:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885615/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef46ff90-8bc4-563d-9fe3-a4bfb5989d8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://aujh.jadoobet.blog/cc93203e-61f0-4814-9fce-e39f20fde2d3",
      "pattern": "[url:value = 'https://aujh.jadoobet.blog/cc93203e-61f0-4814-9fce-e39f20fde2d3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:25:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885614/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45466152-5dc0-5548-acf2-8ca935cac68d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.212.141.129:59505/bin.sh",
      "pattern": "[url:value = 'http://103.212.141.129:59505/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:19:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885613/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26a2846d-f733-5f2a-b381-cc0af570fd8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.186.74.237:54017/bin.sh",
      "pattern": "[url:value = 'http://105.186.74.237:54017/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885612/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8eea8ff6-ec70-5f23-83d1-3293982c9d55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.72.176:51225/bin.sh",
      "pattern": "[url:value = 'http://110.37.72.176:51225/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:17:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885611/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94fa4be3-cf6c-5d06-a907-7952464556fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fggcvmnq.jadoobet.forum/a6845b16-9b85-4168-90c0-721574d0bf0e",
      "pattern": "[url:value = 'https://fggcvmnq.jadoobet.forum/a6845b16-9b85-4168-90c0-721574d0bf0e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:11:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885610/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31da5119-334b-59f7-b46a-4a94b29799b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.225.90.107:40405/bin.sh",
      "pattern": "[url:value = 'http://105.225.90.107:40405/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:09:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885609/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47077119-7fab-5446-a708-7a24b5f8e5d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.0.19:40211/bin.sh",
      "pattern": "[url:value = 'http://115.49.0.19:40211/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:07:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885608/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1006cfd9-4a40-58f9-b9ae-59f4411ee7ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/mpsl",
      "pattern": "[url:value = 'http://205.237.110.232/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:04:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885607/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e8c27de-840d-509a-9afc-90c8ca54c0b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/arm",
      "pattern": "[url:value = 'http://205.237.110.232/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:03:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885606/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc111b14-1215-5b24-aac5-08f560e6f75d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/AfN",
      "pattern": "[url:value = 'http://129.121.114.124/AfN']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885605/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb1139f7-e5ce-509c-804d-10ab6d5ec487",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/v9EB",
      "pattern": "[url:value = 'http://129.121.114.124/v9EB']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885603/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58bc006d-76fe-5d61-8bd0-a3e8bc878d06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/82D6",
      "pattern": "[url:value = 'http://129.121.114.124/82D6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885604/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5ed2600-1c80-51da-a1f0-2d0247127e93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/arm5",
      "pattern": "[url:value = 'http://205.237.110.232/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885602/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2984da5c-fbdc-58d7-a6f9-8f85a99241e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/arm7",
      "pattern": "[url:value = 'http://205.237.110.232/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885599/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--653084f8-8baa-5ab8-8e7f-545856e8746e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/mips",
      "pattern": "[url:value = 'http://205.237.110.232/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885600/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39c87cbc-4a47-5906-b840-be0ac9614aa1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/aarch64",
      "pattern": "[url:value = 'http://205.237.110.232/aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885601/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f5b0d10-986e-56c0-af54-daaf0b229a61",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://205.237.110.232/x86",
      "pattern": "[url:value = 'http://205.237.110.232/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885598/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--790eace2-2b23-50d6-afa9-4f0cfcec408b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/XoQw",
      "pattern": "[url:value = 'http://129.121.114.124/XoQw']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885591/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3389e69-c321-5629-9ae8-b3d72300b02e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/wW6d",
      "pattern": "[url:value = 'http://129.121.114.124/wW6d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885592/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48939f82-6b0c-55a1-a292-d93dd6c22ea2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/CKAK",
      "pattern": "[url:value = 'http://129.121.114.124/CKAK']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885593/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdd19001-2ab3-5054-ac9a-2da703507a1d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/QKtU",
      "pattern": "[url:value = 'http://129.121.114.124/QKtU']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885594/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39d946cf-5fa0-5c53-bdd4-c5e47d45354f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/Qcl",
      "pattern": "[url:value = 'http://129.121.114.124/Qcl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885595/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a633b735-132d-5a9e-a75c-5f2b485fef28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/uck",
      "pattern": "[url:value = 'http://129.121.114.124/uck']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885596/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24954573-d331-58f9-af81-f1bb84e21a0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://129.121.114.124/8l1",
      "pattern": "[url:value = 'http://129.121.114.124/8l1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T17:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885597/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a9603af-eb29-5fae-adfd-d2af9c945c49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.86.5:54523/i",
      "pattern": "[url:value = 'http://182.126.86.5:54523/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:56:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885590/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3057bfe-ff13-51af-bf92-e04b117f9386",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.58.188.169:33841/bin.sh",
      "pattern": "[url:value = 'http://59.58.188.169:33841/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:45:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885589/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d735265-7653-5718-ac29-af7adb85c178",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.239.89.64:54455/i",
      "pattern": "[url:value = 'http://112.239.89.64:54455/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:43:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885588/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--173cf3a3-9b98-5421-903e-42c4f609ede7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.227.52:50928/i",
      "pattern": "[url:value = 'http://42.231.227.52:50928/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:37:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885587/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6ca5004-3dda-5927-a5e9-940d3ef0e784",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.86.5:54523/bin.sh",
      "pattern": "[url:value = 'http://182.126.86.5:54523/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:36:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885586/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fc65e0a-55cd-500b-ac9f-85c80492ca5e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.142.204:39945/i",
      "pattern": "[url:value = 'http://59.96.142.204:39945/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:32:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885585/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9de964be-3701-5bf8-b674-314b25a0d37f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.57.112:47570/i",
      "pattern": "[url:value = 'http://182.119.57.112:47570/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885584/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3db4516a-642e-591a-9e48-e51be60cb5f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tcxc.behtarin-site-shartbandi.com/a0494149-c7d5-4e11-a7b2-1d56dc1549e3",
      "pattern": "[url:value = 'https://tcxc.behtarin-site-shartbandi.com/a0494149-c7d5-4e11-a7b2-1d56dc1549e3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:25:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885583/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d38c013e-667d-5ca0-b21d-9b11f0df480b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.90.113:57377/i",
      "pattern": "[url:value = 'http://42.231.90.113:57377/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:22:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885582/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9da4d47a-9b63-54ce-96c3-59974f8655b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qcilezmw.jadoobet.club/5ad0d60b-ea82-4da0-99bf-e1c89210e9d1",
      "pattern": "[url:value = 'https://qcilezmw.jadoobet.club/5ad0d60b-ea82-4da0-99bf-e1c89210e9d1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:16:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885581/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9efde880-bb1c-5726-b587-8fc7bb4abc69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.227.52:50928/bin.sh",
      "pattern": "[url:value = 'http://42.231.227.52:50928/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:13:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885580/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d386227-2f9f-5444-b3b4-1c3f9bd4a758",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.226.195.78:45403/i",
      "pattern": "[url:value = 'http://42.226.195.78:45403/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:12:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885579/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--470fa0a2-2996-5590-ac20-7f5ea8dcc587",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.226.195.78:45403/bin.sh",
      "pattern": "[url:value = 'http://42.226.195.78:45403/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:11:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885578/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7be86423-88f2-5739-b882-380bb3e2f2d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.70.183.42:40654/i",
      "pattern": "[url:value = 'http://39.70.183.42:40654/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T16:11:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885577/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--444d21fb-429c-56ed-8394-9a0469776518",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.57.112:47570/bin.sh",
      "pattern": "[url:value = 'http://182.119.57.112:47570/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:59:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885576/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71430b80-f08e-54ee-b3cf-a53827825227",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ap9nqrjc.jadoou.christmas/?ublib=0f9ff334-d7c1-49e3-a9be-c06b500a2599",
      "pattern": "[url:value = 'https://ap9nqrjc.jadoou.christmas/?ublib=0f9ff334-d7c1-49e3-a9be-c06b500a2599']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885575/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b532b861-ee10-5d1a-b8eb-a1d74f4892f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.225.49:55567/i",
      "pattern": "[url:value = 'http://115.52.225.49:55567/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:48:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885574/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2672ffe4-450f-5f84-93d8-d4105a23a8d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.225.49:55567/bin.sh",
      "pattern": "[url:value = 'http://115.52.225.49:55567/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:45:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885573/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b71c818-a8a4-5669-8080-e8f4484c2a04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/urlhaus/niggerniggerniggers",
      "pattern": "[url:value = 'http://94.154.43.42/urlhaus/niggerniggerniggers']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885572/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cec0bb0-50b1-5d41-af29-70b8a34f406f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xuqbplvg.site-shartbandi-khareji.com/?ublib=eeef3ed8-c163-4b96-8a5d-1f947d2436a6",
      "pattern": "[url:value = 'https://xuqbplvg.site-shartbandi-khareji.com/?ublib=eeef3ed8-c163-4b96-8a5d-1f947d2436a6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:38:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885571/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--773dfb12-88f6-578b-b352-adcb10e64ba9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.225.90.107:40405/i",
      "pattern": "[url:value = 'http://105.225.90.107:40405/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:33:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885570/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--837dd6cc-ee4d-5f89-baea-95824d42ef99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/69fae640e8174bdfa0056b685ae7e460.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/69fae640e8174bdfa0056b685ae7e460.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:33:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885569/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35b23587-7a18-58d3-9b58-618dfdc61396",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://www.dropbox.com/scl/fi/mi04qq5uwgzibvbe85xxh/InnerEvil.zip?rlkey=sj6b21tfiqnpvdsv9qkm9mqbw&st=qj6l2jgm&dl=1",
      "pattern": "[url:value = 'https://www.dropbox.com/scl/fi/mi04qq5uwgzibvbe85xxh/InnerEvil.zip?rlkey=sj6b21tfiqnpvdsv9qkm9mqbw&st=qj6l2jgm&dl=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:33:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885568/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--886f8ef3-7248-5e7f-9eea-c70a9df34325",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_cc5ccee3442901b7.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_cc5ccee3442901b7.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:33:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885567/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fb40d1e-d7f6-5d54-9d1b-a28c6abba95b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ljqk.bahigo.casino/d7bafbc9-ca48-4cf3-8490-5136d8a36f2f",
      "pattern": "[url:value = 'https://ljqk.bahigo.casino/d7bafbc9-ca48-4cf3-8490-5136d8a36f2f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885566/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bde001ee-0a1e-5f47-928b-5ccf542af539",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qqjbcfkl.fileboroo.com/431ac1b3-f945-477e-943b-a7b331925541",
      "pattern": "[url:value = 'https://qqjbcfkl.fileboroo.com/431ac1b3-f945-477e-943b-a7b331925541']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:20:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885565/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e48002fe-32e2-5158-a6f5-98e3af79614e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.135.42.30:54689/bin.sh",
      "pattern": "[url:value = 'http://220.135.42.30:54689/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885564/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--157bc137-ba89-505b-8e3e-a8a3f7c3a5fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://46.236.65.230:45153/i",
      "pattern": "[url:value = 'http://46.236.65.230:45153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:14:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885563/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e073b3b9-068a-5375-8a10-c47e04bb015d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tl9afxug.bahsegel90.com/?ublib=9671249b-ed7b-401a-aa0f-926aa0eb6db3",
      "pattern": "[url:value = 'https://tl9afxug.bahsegel90.com/?ublib=9671249b-ed7b-401a-aa0f-926aa0eb6db3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:07:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885562/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfeb971f-fb71-5bce-9c02-db6c9aa5ab70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.127.246:38895/bin.sh",
      "pattern": "[url:value = 'http://123.5.127.246:38895/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:07:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885561/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a6c058f-4513-58ac-a053-c33143f893e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://78.171.62.85:50435/i",
      "pattern": "[url:value = 'http://78.171.62.85:50435/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T15:00:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885560/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dcc8796-0bfa-5ff1-b5c9-09cf026d1f5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.9.3.219:50790/i",
      "pattern": "[url:value = 'http://117.9.3.219:50790/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:49:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885559/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9728276-0f75-532e-a976-de26ccf590e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.46.158.248:38896/i",
      "pattern": "[url:value = 'http://115.46.158.248:38896/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:48:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885558/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fabf018f-8bf9-5910-8d5b-a96a9c335f52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://211.73.163.154:36543/.i",
      "pattern": "[url:value = 'http://211.73.163.154:36543/.i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885557/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ac1f735-cd54-5edc-941a-5e14fe541531",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://78.171.62.85:50435/bin.sh",
      "pattern": "[url:value = 'http://78.171.62.85:50435/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:35:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885556/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f561b19a-82b7-5b0c-bf09-131b7ca89c6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.170.80:52707/i",
      "pattern": "[url:value = 'http://123.5.170.80:52707/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:29:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885555/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f1a5905-6ea3-5ebd-9fd1-d4a06cecaf1c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.117.87.164:59176/bin.sh",
      "pattern": "[url:value = 'http://119.117.87.164:59176/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:27:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885554/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c875032c-66b6-54b1-b35d-aaf8bb890178",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.117.87.164:59176/i",
      "pattern": "[url:value = 'http://119.117.87.164:59176/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885553/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e096f320-98f4-5f5f-bac6-2f26ef26341e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kyqwfrjr.betturkey.bet/6c3d1924-bdc3-472b-b0bc-fd474fced06f",
      "pattern": "[url:value = 'https://kyqwfrjr.betturkey.bet/6c3d1924-bdc3-472b-b0bc-fd474fced06f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885552/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da9d2d73-6181-5303-9972-f554b3ca6762",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rddj.jadoou.boats/d0dfe87c-66d1-4a9b-be47-274db337adbd",
      "pattern": "[url:value = 'https://rddj.jadoou.boats/d0dfe87c-66d1-4a9b-be47-274db337adbd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885551/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcc88167-b48b-5ea3-8c0f-767022384336",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nsuoqcej.betturkey.bet/1b96bba8-7963-4ee5-9145-46ed29dd741c",
      "pattern": "[url:value = 'https://nsuoqcej.betturkey.bet/1b96bba8-7963-4ee5-9145-46ed29dd741c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:23:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885550/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18ccc278-7878-509f-ae32-f6231eb883a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.82.102:53022/i",
      "pattern": "[url:value = 'http://222.137.82.102:53022/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:21:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885549/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07410b8a-6eaa-5b46-9c0f-1ee567d11934",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.46.158.248:38896/bin.sh",
      "pattern": "[url:value = 'http://115.46.158.248:38896/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:18:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885548/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6807fe88-9f63-5dd1-9dc4-63450f339d95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://llar.jadoou.boats/c5892db4-a47c-4cc2-b55d-9c5ce1883687",
      "pattern": "[url:value = 'https://llar.jadoou.boats/c5892db4-a47c-4cc2-b55d-9c5ce1883687']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885547/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e3194f3-0450-55dd-8527-605ab1455a3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.179.239.23:37650/i",
      "pattern": "[url:value = 'http://119.179.239.23:37650/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885546/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68058f0f-0f50-5c73-82fb-917063228d0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.176.143.150:53616/i",
      "pattern": "[url:value = 'http://119.176.143.150:53616/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T14:02:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885545/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0414ebd-1bbd-58ff-ab85-4d851aa1798f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.9.3.219:50790/bin.sh",
      "pattern": "[url:value = 'http://117.9.3.219:50790/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:56:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885544/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9878cf7-31ab-5265-b20d-ec254926db94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.145.161:36348/i",
      "pattern": "[url:value = 'http://115.48.145.161:36348/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:56:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885543/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4821073d-4807-5f1b-a658-c8fbda681c0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.12.61:50211/i",
      "pattern": "[url:value = 'http://110.36.12.61:50211/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:51:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885542/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30ed884c-3bf5-597f-b4dc-7f3c640f18a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cbsnews.date/tgv/RandApp",
      "pattern": "[url:value = 'https://cbsnews.date/tgv/RandApp']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:50:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885541/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--239b777a-f4df-5e23-8fa9-761d9abfa65f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://voltix-net.biz/Popka/Volti%D1%85.zip",
      "pattern": "[url:value = 'https://voltix-net.biz/Popka/Volti%D1%85.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:50:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885540/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c22ea529-2cdc-574b-9743-e7e207436a92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://arcanemods.top/ArcaneSetup.zip",
      "pattern": "[url:value = 'https://arcanemods.top/ArcaneSetup.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:50:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885539/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de3519a5-6e78-5fcc-992f-50c7e0aae573",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.115.235:43187/i",
      "pattern": "[url:value = 'http://115.61.115.235:43187/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:45:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885538/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--126e66b2-e9e5-535d-94c9-1d341ffcb588",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.144.131:44167/i",
      "pattern": "[url:value = 'http://115.55.144.131:44167/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:42:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885537/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31aa1411-27dc-59a6-91de-f8769000783c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qfjwyksn.jadoobet.info/?ublib=45a7b450-cc43-4ba3-9f4b-8a91a5777ec5",
      "pattern": "[url:value = 'https://qfjwyksn.jadoobet.info/?ublib=45a7b450-cc43-4ba3-9f4b-8a91a5777ec5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:37:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885536/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a34ab0d-f7ab-5f3f-9234-f58db513edbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zduyoblb.betropol.bet/2207261e-0ee9-4dcd-a0af-1585040d3e39",
      "pattern": "[url:value = 'https://zduyoblb.betropol.bet/2207261e-0ee9-4dcd-a0af-1585040d3e39']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:28:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885535/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3878fac4-0da1-5385-8684-6d8ff72f059a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.55.238.98:49506/i",
      "pattern": "[url:value = 'http://42.55.238.98:49506/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:27:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885534/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40e7bf3f-845a-544d-a0f3-6a28a7fcebcf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.12.61:50211/bin.sh",
      "pattern": "[url:value = 'http://110.36.12.61:50211/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:27:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885533/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51460e00-ca4a-5b44-afd9-adedd19e24ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://122.243.151.244:35817/bin.sh",
      "pattern": "[url:value = 'http://122.243.151.244:35817/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:20:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885532/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2507e67d-af7e-5733-af53-9817f5f75af9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ltvz.jadoou.biz/8860b420-6636-47f5-9366-bc931f7e2d17",
      "pattern": "[url:value = 'https://ltvz.jadoou.biz/8860b420-6636-47f5-9366-bc931f7e2d17']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885531/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--045eaaa4-0592-5359-b020-b7a165ad7dd5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.155.11.95:50263/i",
      "pattern": "[url:value = 'http://219.155.11.95:50263/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T13:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885530/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdeb6838-9b24-56ad-9fac-d69488c3c0f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://peiry.casinomilyon.bet/746f1c39-d1a6-41f9-a6fa-e0602a2c4d76",
      "pattern": "[url:value = 'https://peiry.casinomilyon.bet/746f1c39-d1a6-41f9-a6fa-e0602a2c4d76']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885529/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46d17d66-8d6c-5618-83f0-6c7b21c22cfd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.242.108.23:56637/i",
      "pattern": "[url:value = 'http://112.242.108.23:56637/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:44:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885528/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ae6c1a4-e2ea-51f0-8e69-707decdaf064",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/ar15.x86",
      "pattern": "[url:value = 'http://94.154.43.42/ar15.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:40:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885525/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f940334-ca87-55f7-95bd-319278f22067",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/ar15.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bin/ar15.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:40:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885526/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca5d902f-523d-5003-8c1c-a060523b5007",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.229.220.65:34605/i",
      "pattern": "[url:value = 'http://42.229.220.65:34605/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:40:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885527/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b78d9846-a6d4-50d6-9d7d-2eda52b6ba31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/ar15.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bins/ar15.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:40:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885523/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7b3d579-030c-5a24-88d1-61dedacbfb5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/ar15.x86",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/ar15.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:40:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885524/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91310238-bafb-5820-8bcb-e876c04349d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.79.70:46480/i",
      "pattern": "[url:value = 'http://222.138.79.70:46480/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:37:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885522/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfb1a149-6a53-5828-83a4-f17c2e793630",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wubbueiu.betpublic.casino/051cbb16-a150-4bbd-8cfd-3058f1884ecc",
      "pattern": "[url:value = 'https://wubbueiu.betpublic.casino/051cbb16-a150-4bbd-8cfd-3058f1884ecc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:36:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885521/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33d5675e-e4fe-5c69-85b9-d0889cc39778",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.115.235:43187/bin.sh",
      "pattern": "[url:value = 'http://115.61.115.235:43187/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:31:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885520/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f82e643-a02f-5200-adcc-c119b42f9d67",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.175.2.55:41358/i",
      "pattern": "[url:value = 'http://175.175.2.55:41358/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:27:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885519/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fbd623d-9231-583e-999e-eae433c00bbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.216.128:52845/i",
      "pattern": "[url:value = 'http://221.15.216.128:52845/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:20:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885518/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--276a0fbb-a342-547a-9fe8-59e400bccc37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xxaz.jadoou.beauty/d631e478-2ef6-4f9c-95e2-42234a5a3d21",
      "pattern": "[url:value = 'https://xxaz.jadoou.beauty/d631e478-2ef6-4f9c-95e2-42234a5a3d21']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:16:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885517/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba63024a-092e-555b-a116-236974750538",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.242.108.23:56637/bin.sh",
      "pattern": "[url:value = 'http://112.242.108.23:56637/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:15:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885516/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5b21982-4bfe-50bd-a77a-6cce87928991",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.80.33:56674/bin.sh",
      "pattern": "[url:value = 'http://61.52.80.33:56674/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:05:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885515/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66f77fc5-869b-5990-9b94-fb7d391e0e32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.175.2.55:41358/bin.sh",
      "pattern": "[url:value = 'http://175.175.2.55:41358/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T12:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885514/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55f45af5-0ef9-55ab-9d3d-e3f1bb34705c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://exptersed.com/debug/loader.sh",
      "pattern": "[url:value = 'https://exptersed.com/debug/loader.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:41:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885512/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2e382f8-293b-5bb4-9979-dfd57ecedbdd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ringmycellphone.com/images/rotate/rotate.php",
      "pattern": "[url:value = 'https://ringmycellphone.com/images/rotate/rotate.php']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:41:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885513/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e6e8a53-e70d-54a9-bf9a-c62d6638540f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://exptersed.com/debug/payload.applescript",
      "pattern": "[url:value = 'https://exptersed.com/debug/payload.applescript']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:41:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885511/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21dc1118-826b-5585-8931-5c447b7a6cbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://exptersed.com/debug/payload.applescript?build=2200432e9275376bedaf93db2cd7feb4",
      "pattern": "[url:value = 'https://exptersed.com/debug/payload.applescript?build=2200432e9275376bedaf93db2cd7feb4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:41:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885510/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef825e49-6bf0-5bb5-ae22-81a022913e8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_83d31179e5ad1d41.msi",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_83d31179e5ad1d41.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:41:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885509/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d42dc07c-bfae-5dc8-a710-b107cd6ff4ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://218.93.57.127:46975/bin.sh",
      "pattern": "[url:value = 'http://218.93.57.127:46975/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:37:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885508/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--094753fa-a599-56a4-9671-11237c59cf35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://owhzzucu.jadoou.cyou/?ublib=22ff5e31-98ca-4762-9c5c-70c36de7fe56",
      "pattern": "[url:value = 'https://owhzzucu.jadoou.cyou/?ublib=22ff5e31-98ca-4762-9c5c-70c36de7fe56']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:36:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885507/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3b8772f-c356-51f5-9bcb-3ed1e3045719",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zbplgmhe.bet90forward.win/5b259190-a06b-4b6a-a92c-2632aa5c1431",
      "pattern": "[url:value = 'https://zbplgmhe.bet90forward.win/5b259190-a06b-4b6a-a92c-2632aa5c1431']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:35:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885506/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6454c253-eded-5c20-8578-670045d3c0ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.66.188:53108/i",
      "pattern": "[url:value = 'http://110.37.66.188:53108/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:27:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885505/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8fc2502-c89e-5cb9-95fd-7e779d5117c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.36.250.212:47035/bin.sh",
      "pattern": "[url:value = 'http://36.36.250.212:47035/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:27:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885504/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f77835f7-d918-5579-858f-403d20448955",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.225.203.208:44794/i",
      "pattern": "[url:value = 'http://42.225.203.208:44794/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:21:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885503/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c614dc5-f135-51f7-ae10-8df4130a0a75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://elng.jadoou.baby/883cb613-5b0b-4410-8696-5ef2ba6535c9",
      "pattern": "[url:value = 'https://elng.jadoou.baby/883cb613-5b0b-4410-8696-5ef2ba6535c9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:13:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885502/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--975cd72a-9bef-5ac5-b468-2e1ad5e2301c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.225.203.208:44794/bin.sh",
      "pattern": "[url:value = 'http://42.225.203.208:44794/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:10:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885501/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17052c3d-2214-5918-ba59-b45c1a5f4bb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.54.2.44:50302/i",
      "pattern": "[url:value = 'http://42.54.2.44:50302/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T11:00:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885500/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc389aeb-56fb-505b-809a-0e98b741aff1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.219.218:58497/i",
      "pattern": "[url:value = 'http://120.28.219.218:58497/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:56:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885499/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--804dd6da-8a7c-5172-a64b-3ad228c450ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.200.193:51670/bin.sh",
      "pattern": "[url:value = 'http://120.28.200.193:51670/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:56:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885498/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3520bba4-65a4-5316-96dc-6cd4fae77ed5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mjbpgp3k.jadoou.cfd/?ublib=f4e25355-7f92-4829-9607-bf2c2b9d748e",
      "pattern": "[url:value = 'https://mjbpgp3k.jadoou.cfd/?ublib=f4e25355-7f92-4829-9607-bf2c2b9d748e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:53:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885497/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd6383cd-7289-5e37-9423-879b177897ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.173.120.231:46446/i",
      "pattern": "[url:value = 'http://175.173.120.231:46446/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:52:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885496/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47e68c30-5b56-53b9-97b5-47c720ac51d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.124.129.1:40347/i",
      "pattern": "[url:value = 'http://182.124.129.1:40347/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:46:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885495/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1f9a70f-9888-59dd-85f5-600c309e350c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fibvhxte.bekabet.casino/44830036-ce23-46ab-a71c-f2f19094f716",
      "pattern": "[url:value = 'https://fibvhxte.bekabet.casino/44830036-ce23-46ab-a71c-f2f19094f716']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:40:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885494/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6e03a4c-7c2c-5c80-a67e-37d06cecc437",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.104.206:34529/i",
      "pattern": "[url:value = 'http://182.121.104.206:34529/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:38:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885493/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03e00acd-3ed9-5f3f-86fd-d1eb89c8a8b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.157.57:42493/i",
      "pattern": "[url:value = 'http://61.52.157.57:42493/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:31:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885492/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d159ac78-a114-530e-8803-da5115b90c98",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.41.3.43:57288/i",
      "pattern": "[url:value = 'http://125.41.3.43:57288/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:22:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885491/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f65a4899-a3a9-5a58-a293-2b9765e86464",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.66.147:33877/bin.sh",
      "pattern": "[url:value = 'http://42.231.66.147:33877/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:17:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885490/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1113e087-c200-5c75-a531-9f1cd63fa894",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.54.2.44:50302/bin.sh",
      "pattern": "[url:value = 'http://42.54.2.44:50302/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:15:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885489/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8830a71-dc41-5800-ae9d-f9a822caa533",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.157.57:42493/bin.sh",
      "pattern": "[url:value = 'http://61.52.157.57:42493/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:08:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885488/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2da06ff2-ff23-5843-af5c-9be04bbed6c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tgjg.jadoou.autos/a9c55ebf-3bc9-4e5b-87bf-59904e3bdb15",
      "pattern": "[url:value = 'https://tgjg.jadoou.autos/a9c55ebf-3bc9-4e5b-87bf-59904e3bdb15']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:08:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885487/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6913ca1-31fa-5a6c-9cf9-1fe8dbdf22e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rgklgdmw.jadoobet.click/?ublib=39b6c84b-94e1-47a4-9b57-885788854487",
      "pattern": "[url:value = 'https://rgklgdmw.jadoobet.click/?ublib=39b6c84b-94e1-47a4-9b57-885788854487']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:07:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885486/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f15997ee-7d2a-5692-884c-45862d79011f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.80.33:56674/i",
      "pattern": "[url:value = 'http://61.52.80.33:56674/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T10:00:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885485/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59da7c7b-aaa2-5558-9527-39a3b31a0866",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.232.24.238:41409/i",
      "pattern": "[url:value = 'http://42.232.24.238:41409/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:58:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885484/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb6073d1-7021-512b-a9a2-1dcfe56fdd85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.219.218:58497/bin.sh",
      "pattern": "[url:value = 'http://120.28.219.218:58497/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:55:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885483/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3b98251-6b24-5990-86d7-e764c955ffae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.124.129.1:40347/bin.sh",
      "pattern": "[url:value = 'http://182.124.129.1:40347/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:49:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885482/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc9d0099-f4c8-53fa-91b2-2a2f8d003068",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://acthwqwn.behtarin-site-shartbandi.com/21e8f421-57c5-470b-80e7-7191fece8290",
      "pattern": "[url:value = 'https://acthwqwn.behtarin-site-shartbandi.com/21e8f421-57c5-470b-80e7-7191fece8290']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885481/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2c72c43-83e0-5cf7-b5d4-1a5a44329ba8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://9h5e0vbd.jadoou.club/?ublib=8c7d8c1b-d43a-4676-baac-132ed6648164",
      "pattern": "[url:value = 'https://9h5e0vbd.jadoou.club/?ublib=8c7d8c1b-d43a-4676-baac-132ed6648164']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:36:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885480/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebfd55ce-ebc7-5931-bdf4-5c1addeb5fa1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.arm5",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885479/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ea55b5b-e015-583e-8236-2b6fae799506",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.ppc",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885475/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa11e548-9574-5ad8-ab70-2e14c8508ffd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.mpsl",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885476/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffde6fac-32f8-5523-858e-af79b4a171cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.arm7",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885477/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3ec7745-151d-523a-89d0-61c5f97c0fa8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.spc",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885478/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec14289d-a146-5cca-9905-942cdafacdee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.arm",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885471/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c78dc0b1-779e-5162-a257-3bfade5d34ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.x86",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885472/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c23291a9-25ee-5cff-af43-cc8d445a514e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.sh4",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885473/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30939426-11fd-599f-b905-be67760dc247",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.ppc",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885474/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b60808c-219b-5840-9d91-b1b7bf272a29",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.x86",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885466/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c74c72e6-e5b8-5e65-b939-c00740c27b9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.m68k",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885467/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d847b2ab-03cc-5629-b272-7fe7c3961d1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.mips",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885468/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b487379-67d3-5563-8318-399aef13b1b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.sh4",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885469/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--447747c2-a950-5687-9b6d-caa733bcfadc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.107.16.92:50429/i",
      "pattern": "[url:value = 'http://175.107.16.92:50429/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885470/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79fcd528-beb0-5e98-9e57-d1639fbd1803",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.x86_64",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885465/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd66eba8-0107-5fed-a41b-b6f72a01adef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.mips",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885459/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbe74906-637d-5a94-9071-cc54397d3ac0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.x86_64",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885460/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6593c0a4-2a38-50b1-b0d3-56f69663771e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.spc",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885461/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af4c8622-173e-5ebe-aa50-096a905a3341",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.arm5",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885462/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19194836-001e-5653-8085-28f584cf8a45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.mpsl",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885463/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae983686-4a60-5b99-8895-df23926ffdd5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.arm7",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885464/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec49a51f-1d15-55bb-afd2-79b2562c64ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.i686",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885453/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--232a43d6-9595-57e0-8d1f-04e36635db0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.i686",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885454/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--410a1afd-6f15-5924-ac85-0dfe31619083",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.m68k",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885455/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3ea7dfd-21f4-5437-9ef2-508e5a2ae992",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.arm6",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885456/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcc9bdb0-a2b4-5cb4-9a5d-03d32ab3231a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.arc",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885457/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfb97944-790a-51a9-a390-602f638a0cd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.duckdns.org/ar-15/ar15.arc",
      "pattern": "[url:value = 'http://igmc.duckdns.org/ar-15/ar15.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885458/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--570f1d8e-4817-54b0-9fdd-14755fb43f31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.arm",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885451/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eeb87d53-b3ee-540c-b091-04addef38198",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://igmc.ddns.net/ar-15/ar15.arm6",
      "pattern": "[url:value = 'http://igmc.ddns.net/ar-15/ar15.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885452/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a567aeb-1ec4-5a6a-bd40-cdeb0258eaa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.5.162:47162/i",
      "pattern": "[url:value = 'http://61.52.5.162:47162/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:23:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885450/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5e848e1-48f7-5b74-ba21-c890240ab861",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.61.25:49352/i",
      "pattern": "[url:value = 'http://112.248.61.25:49352/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885449/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d10695c8-456d-52b4-b59e-7dcca2f0bbd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://omwf.jadoou.art/3fdbe0c1-4fe2-478f-ad6c-b1efed486439",
      "pattern": "[url:value = 'https://omwf.jadoou.art/3fdbe0c1-4fe2-478f-ad6c-b1efed486439']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885448/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--774f1df2-dd43-526b-b20b-c82a6513670c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.5.162:47162/bin.sh",
      "pattern": "[url:value = 'http://61.52.5.162:47162/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T09:00:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885447/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--479ab6b5-2bc6-551b-92f0-81b68096b256",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xmgonqda.jadoobet.xyz/02fd6dad-2527-4251-b2c9-648e0dc3f04d",
      "pattern": "[url:value = 'https://xmgonqda.jadoobet.xyz/02fd6dad-2527-4251-b2c9-648e0dc3f04d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:50:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885446/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e247ad1-fcde-551a-a880-a08c09ee2125",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.236.22:51533/bin.sh",
      "pattern": "[url:value = 'http://105.184.236.22:51533/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:37:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885445/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbbd2374-b97b-5c45-8ff0-fa39fb270126",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.45.65.228:36488/i",
      "pattern": "[url:value = 'http://125.45.65.228:36488/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:33:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885444/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dad325f9-4b83-550c-9ae5-57064642ca40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.229.115:35148/i",
      "pattern": "[url:value = 'http://196.190.229.115:35148/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:16:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885443/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3a4ef00-0466-5bd0-9744-92e05024db8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.45.65.228:36488/bin.sh",
      "pattern": "[url:value = 'http://125.45.65.228:36488/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:12:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885442/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9626516c-82e0-5332-82e8-46215c01f362",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tetz.site-shartbandi-khareji.com/dca18a52-f5bc-4110-a48b-8f22b5049993",
      "pattern": "[url:value = 'https://tetz.site-shartbandi-khareji.com/dca18a52-f5bc-4110-a48b-8f22b5049993']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885441/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4539c657-c67b-51c9-b280-b49a9a8e1d44",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.sh4",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885440/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6922ea4-9fef-5064-8888-7f04b259fe69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.m68k",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885437/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab92ac4f-68de-53db-a84f-33efbbe637bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.spc",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885438/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09c8a520-c279-57f6-88db-5ab1efac1238",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.x86_64",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885439/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a617cb1d-d1e0-5e86-8adf-ce5ac2f0551d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.mpsl",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885410/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0b61256-337e-564f-bd03-632b17e20a9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.arm7",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885411/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e65fea4f-8f23-5be5-895c-e586a1da2678",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.mpsl",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885412/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd629642-f62f-522a-ac74-368560c5a7f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.i686",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885413/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86c9ea29-9774-55c7-b20b-da74a425e46b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDi686",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDi686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885414/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--509b647a-9f1f-5ab8-8243-e7ef879376f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.mips",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885415/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33e1c5d8-fb3c-582d-b678-a8c20e26e14d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.sh4",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885416/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0746536b-8785-5504-a6d4-350bf6de957a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.10/bins/parm",
      "pattern": "[url:value = 'http://94.154.43.10/bins/parm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885417/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26723633-6b17-5597-aa4d-2ce6844fe414",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/https/mips",
      "pattern": "[url:value = 'http://217.60.195.214/https/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885418/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a9196a3-5b21-5bd5-a23f-f5ea75ba6964",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDx86_64",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDx86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885419/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02cc0bd4-bb9c-5a37-88d1-d0eeb325867c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDarc",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDarc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885420/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9b75737-60f6-5943-9a10-8a890de4b4d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.arm6",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885421/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8441cea9-4a01-564b-a9da-21256a817d46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/https/aarch64",
      "pattern": "[url:value = 'http://217.60.195.214/https/aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885422/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--262744f1-ae39-54de-9d36-f6e3a5c8196c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.arm6",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885423/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ee796bf-d5b2-510d-b3c9-1582337722c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.spc",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885424/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc4d9fc7-eaa3-55f5-9bf6-2e4ed00e46c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.arm5",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885425/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9c6216a-7cc4-5cdc-9e01-dcf9c5331d65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.mips",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885426/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cb2c3a4-901c-55a4-ba74-ad270b606cdb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.x86",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885427/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c14180f-97aa-5329-a0f1-b493bb48043d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.arm",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885428/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f511e8f5-81a9-5a53-92af-0ad3c9b849da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/https/mpsl",
      "pattern": "[url:value = 'http://217.60.195.214/https/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885429/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e60a5388-5cbe-501e-9889-5371518d92d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/https/arm7",
      "pattern": "[url:value = 'http://217.60.195.214/https/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885430/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--393f3ece-3f57-5098-af12-1e8b6735e376",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/https/arm",
      "pattern": "[url:value = 'http://217.60.195.214/https/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885431/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--503f0956-ffcd-5f64-94fa-0949706d1fe6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.ppc",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885432/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac0901a2-f720-5ada-b43e-78372e6b0e62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.arm",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885433/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae21e4f1-a162-5ad4-b44b-609d1340eb90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.sh4",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885434/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ceb8f073-1344-5388-9d2a-ed769e4851d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.ppc",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885435/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20d2a8b3-8b73-588f-a423-2e6cc0f18aa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.arc",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885436/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3cd36aa-3bb9-5609-ae7f-20b2b49fa657",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/https/x86",
      "pattern": "[url:value = 'http://217.60.195.214/https/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885407/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d607a2cd-6a2e-5221-b567-fe8aec07cbf9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.arm5",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885408/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23b1b7f6-1c5f-5dae-9235-eb63c62fc090",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/https/arm5",
      "pattern": "[url:value = 'http://217.60.195.214/https/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885409/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f4bcae4-5cd0-57b4-8a91-8e939c6be2d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/Ares.arm7",
      "pattern": "[url:value = 'http://45.94.31.70/Ares.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885406/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76c753b4-47cd-5b20-8294-22ce3d7fcf19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDi468",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDi468']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885405/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--254213b2-19a8-53be-82f6-06edd2eead40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.i468",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.i468']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885404/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33321534-8aaa-5695-9eb0-9f5ba405e2ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar-15/ar15.i468",
      "pattern": "[url:value = 'http://104.168.4.206/ar-15/ar15.i468']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885402/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b445f231-d994-5a1a-a567-7f6a7e168be3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/x86",
      "pattern": "[url:value = 'http://45.94.31.70/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:05:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885403/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7c770e7-e9d8-5227-83c0-bfe6f1a05125",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kaleda.pro/d7b5970c.exe",
      "pattern": "[url:value = 'https://kaleda.pro/d7b5970c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T08:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885401/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--030165b7-b83b-552b-9d26-4c83c9b6c210",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kokkpxut.jadoobet.vip/461abad7-ea0d-4211-a8b0-261fd4a5754f",
      "pattern": "[url:value = 'https://kokkpxut.jadoobet.vip/461abad7-ea0d-4211-a8b0-261fd4a5754f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:57:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885400/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f95f6651-2e21-598f-a90e-780cea6f6e56",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.229.115:35148/bin.sh",
      "pattern": "[url:value = 'http://196.190.229.115:35148/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:50:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885399/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2216b54-c56e-5525-8afe-abf89aa55261",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qzl7oi7a.zaribbala.bet/?ublib=fac6fd45-51e6-4f1f-95c2-14321239f9db",
      "pattern": "[url:value = 'https://qzl7oi7a.zaribbala.bet/?ublib=fac6fd45-51e6-4f1f-95c2-14321239f9db']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:37:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885398/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9061d576-f4fa-5779-8314-3454f303302e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://85.239.149.40/lrcaoQ7xSYfFVno2S9",
      "pattern": "[url:value = 'https://85.239.149.40/lrcaoQ7xSYfFVno2S9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:33:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885397/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e011d013-8660-5652-a80f-86d7dd67a7d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.243:6600/ESPIxN5lducyZQW5we",
      "pattern": "[url:value = 'http://91.92.242.243:6600/ESPIxN5lducyZQW5we']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885396/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2d9b6bf-0217-5935-a301-3fad826e237a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://police1107workzlo.vercel.app/?download=1",
      "pattern": "[url:value = 'https://police1107workzlo.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885390/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1711bef2-efdf-5d89-8530-64ead4e91992",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://poiskrunsvo.vercel.app/?download=1",
      "pattern": "[url:value = 'https://poiskrunsvo.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885391/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88efd0a1-c7ce-5266-862d-af343cc7bd89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://chekingmax.vercel.app/?download=1",
      "pattern": "[url:value = 'https://chekingmax.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885392/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f015c8aa-5489-5739-bf10-184760ff04dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://porno-videophotos.vercel.app/?download=1",
      "pattern": "[url:value = 'https://porno-videophotos.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885393/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53e6b1e1-bb26-5b98-ac43-ecc39916b586",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gossuvpn.vercel.app/?download=1",
      "pattern": "[url:value = 'https://gossuvpn.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885394/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11a41141-5d9d-5d83-a2f7-964490b7b57c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://police1107rat.vercel.app/?download=1",
      "pattern": "[url:value = 'https://police1107rat.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885395/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6440a5d2-a159-5d42-8588-96a37f55beb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mvd-2026.ru/Video.apk",
      "pattern": "[url:value = 'https://mvd-2026.ru/Video.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885388/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d19fb31-38f8-5906-9e32-b4c49c71750b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://police0807work.vercel.app/?download=1",
      "pattern": "[url:value = 'https://police0807work.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885389/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ae5a28b-3544-56b2-b544-e3a3c5f10ef6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://104.168.4.206/ar15.sh",
      "pattern": "[url:value = 'http://104.168.4.206/ar15.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885386/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30eb792c-bac0-5185-9f45-8e2eb6762de0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.16/wbpLpf9vg2EVbxmbfW",
      "pattern": "[url:value = 'http://85.239.149.16/wbpLpf9vg2EVbxmbfW']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885387/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfc5e870-dbd8-5f94-90d9-7ece6203c9cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://93.152.224.29/IpS9GN16MBsmhWBe",
      "pattern": "[url:value = 'http://93.152.224.29/IpS9GN16MBsmhWBe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885384/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17dcf30e-6915-5617-8b1a-e32a97a3023a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://93.152.224.29/tBiNhjfyJ2VFClAx85",
      "pattern": "[url:value = 'http://93.152.224.29/tBiNhjfyJ2VFClAx85']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885385/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e6b1ae9-f2d6-55fb-bfbf-01ceffcaa4ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.16/CloudFlare_Captcha_Code_839101",
      "pattern": "[url:value = 'http://85.239.149.16/CloudFlare_Captcha_Code_839101']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885375/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cff3055f-0e4c-5d6b-b142-64cdf359b9cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.16/WOBVpWpXWLm37L9XF",
      "pattern": "[url:value = 'http://85.239.149.16/WOBVpWpXWLm37L9XF']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885376/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92115888-3286-5b9c-8f50-8e76992b2f32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.16/f6ptObhnkvaYRgMEJ",
      "pattern": "[url:value = 'http://85.239.149.16/f6ptObhnkvaYRgMEJ']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885377/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b35571c-ee4c-5ede-881d-c992cadc8781",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.51/payload.sh",
      "pattern": "[url:value = 'http://94.154.43.51/payload.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885378/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c45798c-035e-5971-bfa6-db3ff933f2d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dozco.com/public",
      "pattern": "[url:value = 'https://dozco.com/public']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885379/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8532355-b205-52dd-b6a5-9b91bb2c5402",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.16/BvCPpznZO6547X47",
      "pattern": "[url:value = 'http://85.239.149.16/BvCPpznZO6547X47']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885380/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee82ac79-f695-5787-8547-9fb7a4ffe953",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.16/CloudFlare_Verification_Code_845270",
      "pattern": "[url:value = 'http://85.239.149.16/CloudFlare_Verification_Code_845270']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885381/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09b10333-aa42-564b-b654-8b6ebf1a5c8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.239.149.16/gWowSyTRkvfEcGsIj",
      "pattern": "[url:value = 'http://85.239.149.16/gWowSyTRkvfEcGsIj']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885382/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3f87f88-bb79-504b-b87a-7de802df3968",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://i-like-ele-phants-verification.live/iamchallenge/verification/UserID7383526",
      "pattern": "[url:value = 'https://i-like-ele-phants-verification.live/iamchallenge/verification/UserID7383526']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885383/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8520449f-dd4f-5351-a957-d3d1d4bf867d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_8bb8c1c2c053bb6b.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_8bb8c1c2c053bb6b.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885373/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2883d852-0a0b-50e3-933e-4958aa53794d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_8d7b76226391302b.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_8d7b76226391302b.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:32:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885374/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--805a4f8e-659d-5d62-bdd2-86f245083971",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.217.228.182:48400/i",
      "pattern": "[url:value = 'http://117.217.228.182:48400/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:26:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885372/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac0e1ae6-bf02-5b04-b211-71d0a8ea76c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/kythy.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/kythy.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885371/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3098f3c-521b-541a-b236-17b9219636a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/os1/beb.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/os1/beb.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885370/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a340289f-faac-5821-aff8-b49205596165",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/kliulij.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/kliulij.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885365/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47663847-0b9d-56a6-b043-7aa6d3347857",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/jhgkuyyg.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/jhgkuyyg.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885366/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c97320b-67d8-5aeb-bc20-e62abcdd99e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/hjbk.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/hjbk.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885367/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0047086-0e00-51be-8886-84d76208355b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/ojujn.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/ojujn.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885368/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb8b8047-3fe2-5ead-9476-7d35116c15b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/hnmh.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/hnmh.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885369/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b87632f0-cc05-59fa-b1fb-c3a8fa96f2c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.199.197.10/load/bjbh.exe",
      "pattern": "[url:value = 'http://185.199.197.10/load/bjbh.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:24:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885364/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daa651f9-e70f-5e78-8e59-dfdfb5338744",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.251.121.185/bot",
      "pattern": "[url:value = 'http://196.251.121.185/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:22:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885363/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f082eb15-e7df-5067-b5e6-63d0e9b609c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://89.233.194.35:33044/i",
      "pattern": "[url:value = 'http://89.233.194.35:33044/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885362/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72396fdf-7ab3-5ef8-ac61-194888fa2ba5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://111.70.13.127:55913/i",
      "pattern": "[url:value = 'http://111.70.13.127:55913/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:13:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885361/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4341fa8d-7320-5f90-bb2e-e08c530a8218",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://plzm.onjabet1.com/1b937088-3406-407f-b849-182be3919797",
      "pattern": "[url:value = 'https://plzm.onjabet1.com/1b937088-3406-407f-b849-182be3919797']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885360/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8087717b-145c-5302-afa1-9956b977f3d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://111.70.13.127:55913/bin.sh",
      "pattern": "[url:value = 'http://111.70.13.127:55913/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:03:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885359/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a08bb81b-f4c4-50a8-9aa2-18a8ec55d511",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.217.228.182:48400/bin.sh",
      "pattern": "[url:value = 'http://117.217.228.182:48400/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885358/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc948374-911c-53eb-af87-d4db606ec832",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ruuupkia.jadoobet.pro/ecd888f6-b860-4225-b74b-6d5fa4c08c60",
      "pattern": "[url:value = 'https://ruuupkia.jadoobet.pro/ecd888f6-b860-4225-b74b-6d5fa4c08c60']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T07:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885357/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96d7c664-03db-58de-bf66-8a874d27610f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://89.233.194.35:33044/bin.sh",
      "pattern": "[url:value = 'http://89.233.194.35:33044/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:50:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885356/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fd88d9c-9364-530b-94ae-3c60cc443032",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.114.198.106:45907/i",
      "pattern": "[url:value = 'http://182.114.198.106:45907/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:42:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885355/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--365748e0-c234-5ca0-aa67-20abe9e9b86e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://77.247.88.122:51350/i",
      "pattern": "[url:value = 'http://77.247.88.122:51350/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:28:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885354/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1251a711-b315-540b-af41-679bc215d894",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.239.89.64:54455/bin.sh",
      "pattern": "[url:value = 'http://112.239.89.64:54455/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:19:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885353/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e40e058-65df-5956-8b4e-969d156257b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.116/run.sh",
      "pattern": "[url:value = 'http://94.154.43.116/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:16:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885352/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a42840c-f1d5-58fb-b317-ed0baf7eb776",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xywz.betraca.bet/d7ae90f8-25dd-430d-97cf-5d22fe8bab5c",
      "pattern": "[url:value = 'https://xywz.betraca.bet/d7ae90f8-25dd-430d-97cf-5d22fe8bab5c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:07:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885351/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24a889f5-7c64-5e07-988d-48db6a872558",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ichnwcqh.jadoobet.live/bf1c115f-812c-49cf-ba20-cd5a211c8b0f",
      "pattern": "[url:value = 'https://ichnwcqh.jadoobet.live/bf1c115f-812c-49cf-ba20-cd5a211c8b0f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:03:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885350/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21e24a7e-361b-50e4-b5f3-bbce8657c945",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://77.247.88.122:51350/bin.sh",
      "pattern": "[url:value = 'http://77.247.88.122:51350/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T06:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885349/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91555849-cfa9-52f7-9076-c1b13b7857ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vefzvud7.jadoou.bond/?ublib=109b42cb-4282-4663-9d51-b46d8f760cf6",
      "pattern": "[url:value = 'https://vefzvud7.jadoou.bond/?ublib=109b42cb-4282-4663-9d51-b46d8f760cf6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:50:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885348/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a684a378-1ead-57fe-90e4-05fe565c11dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://81ro1qyb.radioshartbandi.bet/?ublib=a71c6a6f-e445-442e-93de-14b946531cb0",
      "pattern": "[url:value = 'https://81ro1qyb.radioshartbandi.bet/?ublib=a71c6a6f-e445-442e-93de-14b946531cb0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:34:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885347/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89409758-81db-591f-8f1c-0ee25b02dfc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.45.177.94:49515/i",
      "pattern": "[url:value = 'http://27.45.177.94:49515/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:27:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885346/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e8fa465-f1e3-573c-b7d9-687e624def51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.93.216:45563/i",
      "pattern": "[url:value = 'http://222.137.93.216:45563/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:21:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885345/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b6e1992-1628-5c90-b1a3-f535fc9227db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.45.177.94:49515/bin.sh",
      "pattern": "[url:value = 'http://27.45.177.94:49515/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:07:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885344/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--763100a8-b900-513a-8c09-e3bcf4d03c66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://micfybfh.jadoobet.ink/4796c73a-7cd5-48db-a727-89871317445a",
      "pattern": "[url:value = 'https://micfybfh.jadoobet.ink/4796c73a-7cd5-48db-a727-89871317445a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:07:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885343/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c369c155-e92e-5839-a9c6-a97e32c38cda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mdzt.behtarin-site-shartbandi-football.bet/95680789-5ed8-4768-bee1-00eea145d538",
      "pattern": "[url:value = 'https://mdzt.behtarin-site-shartbandi-football.bet/95680789-5ed8-4768-bee1-00eea145d538']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:07:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885342/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--905f160c-d7c5-5d7a-b11e-456bedee18b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fnrok367.jadoobet.blog/?ublib=1715f9a7-fa59-4a8a-985e-36884a8b9dfa",
      "pattern": "[url:value = 'https://fnrok367.jadoobet.blog/?ublib=1715f9a7-fa59-4a8a-985e-36884a8b9dfa']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:06:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885341/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--311cbf67-1ea8-57f9-af8c-3d2ffdd67d24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.55.195:46508/i",
      "pattern": "[url:value = 'http://182.116.55.195:46508/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T05:05:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885340/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fc707d2-a7b8-5c21-af11-1b6038cb4f3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.222.149.160:34087/i",
      "pattern": "[url:value = 'http://27.222.149.160:34087/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:58:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885339/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d755afce-54a5-5287-ad53-a842a36bd03d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.93.216:45563/bin.sh",
      "pattern": "[url:value = 'http://222.137.93.216:45563/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:57:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885338/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--763a02a8-35dd-51ac-9ffd-08dbeb4ebd60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.144.131:44167/bin.sh",
      "pattern": "[url:value = 'http://115.55.144.131:44167/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:57:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885337/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2bb2d9b-eead-512b-9a3f-de585e249ebb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.197.118:47227/i",
      "pattern": "[url:value = 'http://120.28.197.118:47227/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:56:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885336/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28653d8a-f39c-571f-95b8-8eff229d5b3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.55.195:46508/bin.sh",
      "pattern": "[url:value = 'http://182.116.55.195:46508/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:42:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885335/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a425f812-8988-5f99-97bb-ec0102abdc24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.186.204.76:49999/i",
      "pattern": "[url:value = 'http://119.186.204.76:49999/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:33:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885334/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c67669f-eb02-5a63-bcd8-61b792d95536",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.77.19:55731/i",
      "pattern": "[url:value = 'http://110.36.77.19:55731/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:30:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885333/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8552f7c7-af59-5e1a-b3cb-4e35e22eb297",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.136.212:58967/i",
      "pattern": "[url:value = 'http://59.96.136.212:58967/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:27:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885332/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9a694a4-17ba-54e5-a726-7e0324e8d4d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.118.90.115:60669/bin.sh",
      "pattern": "[url:value = 'http://119.118.90.115:60669/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885331/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--644f3f90-4753-56c8-80c2-750137494a23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.66.147:33877/i",
      "pattern": "[url:value = 'http://42.231.66.147:33877/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:25:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885330/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b099761-53e4-5eae-b3e7-f82f7443c470",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.124.209.59:41906/i",
      "pattern": "[url:value = 'http://182.124.209.59:41906/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:21:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885329/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae69c18a-c7cc-5859-868a-cfa25d99bfc7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.127.246:38895/i",
      "pattern": "[url:value = 'http://123.5.127.246:38895/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:15:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885328/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e201671-47c5-5832-b7f0-6487c6bf205a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.186.204.76:49999/bin.sh",
      "pattern": "[url:value = 'http://119.186.204.76:49999/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:14:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885327/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef06daa5-57cf-560e-b62c-663b5763834a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rnjaeyqy.jadoobet.info/e62bcb5f-634b-4c0f-894a-011e81233b0f",
      "pattern": "[url:value = 'https://rnjaeyqy.jadoobet.info/e62bcb5f-634b-4c0f-894a-011e81233b0f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:12:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885326/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59a85c64-4b15-51dd-bac2-ad73c2115dc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.58.169.244:46645/i",
      "pattern": "[url:value = 'http://42.58.169.244:46645/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:08:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885325/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e62bf54-24b2-555e-942e-b22201b65cb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.77.19:55731/bin.sh",
      "pattern": "[url:value = 'http://110.36.77.19:55731/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:07:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885324/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b1b96b6-beab-58e9-8b11-9a8ea5c98642",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bjmd.bahsegel90.com/26439a7b-016e-4ba2-8cfd-cfa699b94f2a",
      "pattern": "[url:value = 'https://bjmd.bahsegel90.com/26439a7b-016e-4ba2-8cfd-cfa699b94f2a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T04:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885323/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--697a90bd-ff7c-53b9-a8a2-f4834a0e14c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.102.72:33000/bin.sh",
      "pattern": "[url:value = 'http://222.138.102.72:33000/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:58:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885322/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc34b119-40f6-571b-86eb-baabc6f14fcd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://108.168.0.60:45909/i",
      "pattern": "[url:value = 'http://108.168.0.60:45909/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:57:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885321/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b216f1ce-3e61-517d-a472-a7b14a8ebd74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.136.212:58967/bin.sh",
      "pattern": "[url:value = 'http://59.96.136.212:58967/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:56:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885320/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c98be673-b5fa-548a-a7be-67ff53a31a9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.255.73:39772/bin.sh",
      "pattern": "[url:value = 'http://115.57.255.73:39772/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:55:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885319/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d253f314-6299-5f61-ab9f-6294febef90d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.215.161:51040/i",
      "pattern": "[url:value = 'http://115.57.215.161:51040/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:40:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885318/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--723be0e6-ec9c-51ca-8f98-92d622810818",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.21.30:38573/i",
      "pattern": "[url:value = 'http://115.52.21.30:38573/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:34:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885317/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--835249bd-0403-5beb-bf8f-68628664cd3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://5r48e4d3.betturkey.bet/?ublib=19340331-dbd2-49d0-bbd3-eb9c1db40e24",
      "pattern": "[url:value = 'https://5r48e4d3.betturkey.bet/?ublib=19340331-dbd2-49d0-bbd3-eb9c1db40e24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:34:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885316/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1dda4ac-13c6-569c-bfef-29da26cb7825",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://108.168.0.60:45909/bin.sh",
      "pattern": "[url:value = 'http://108.168.0.60:45909/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:33:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885315/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8eeed5c-a132-5651-9c2d-c844b559d19c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.189.198.193:44465/bin.sh",
      "pattern": "[url:value = 'http://196.189.198.193:44465/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:27:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885314/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5d6dd6c-d249-57cd-ad4d-d644e88c2248",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.184.3.184:37223/bin.sh",
      "pattern": "[url:value = 'http://220.184.3.184:37223/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:26:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885313/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12ac310a-5daf-5914-bbf5-984cae49fab3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.165.70.97:43547/i",
      "pattern": "[url:value = 'http://175.165.70.97:43547/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:22:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885312/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de34292e-f4ac-5d7c-b962-327f94366d14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.215.161:51040/bin.sh",
      "pattern": "[url:value = 'http://115.57.215.161:51040/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:21:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885311/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a54035b-9a05-5a4a-b7e0-0ed25579167c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://yfekdkqg.jadoobet.forum/50ec875e-53cc-4ca3-97f8-1fcd3c7015ed",
      "pattern": "[url:value = 'https://yfekdkqg.jadoobet.forum/50ec875e-53cc-4ca3-97f8-1fcd3c7015ed']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885310/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94ef0f32-0157-5a36-9ff3-144174f89b40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_arm6",
      "pattern": "[url:value = 'http://95.182.89.105/data_arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:11:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885309/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--481af29c-3e9a-5f19-9822-1aee41af9a2f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.21.30:38573/bin.sh",
      "pattern": "[url:value = 'http://115.52.21.30:38573/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:11:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885308/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--013e2fb3-9bf7-5e47-b4cd-b7b49cd1ce86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_mips-uclibc",
      "pattern": "[url:value = 'http://95.182.89.105/data_mips-uclibc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885300/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d9dfc05-7974-5f8d-8ac7-dde8069f6279",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_arm5",
      "pattern": "[url:value = 'http://95.182.89.105/data_arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885301/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f932290c-f9dd-59df-a6c1-9b84ffa4b66e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_arm4",
      "pattern": "[url:value = 'http://95.182.89.105/data_arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885302/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d523556a-700b-5090-9a61-9e7d15aa365e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_mipsel",
      "pattern": "[url:value = 'http://95.182.89.105/data_mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885303/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9091d3f6-aa42-567e-b63b-bbca7e2ddbea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_x86_64",
      "pattern": "[url:value = 'http://95.182.89.105/data_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885304/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e25c7bb4-1848-5050-86eb-547243047f8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_arm7",
      "pattern": "[url:value = 'http://95.182.89.105/data_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885305/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b26bb27-33a2-54ee-805d-a4d5d637992b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_mips",
      "pattern": "[url:value = 'http://95.182.89.105/data_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885306/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d36c9c0-30d2-5dfd-a3a2-f30cddcb01e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_aarch64",
      "pattern": "[url:value = 'http://95.182.89.105/data_aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885307/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abd9efdc-f15a-596a-bf92-4973faebaac9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/womp",
      "pattern": "[url:value = 'http://95.182.89.105/womp']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:09:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885299/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90663aad-33da-5bb9-93d0-db9a3d09609e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_powerpc",
      "pattern": "[url:value = 'http://95.182.89.105/data_powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885296/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1415c368-490b-5c55-8811-c4c77cdf17ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_mipsel-uclibc",
      "pattern": "[url:value = 'http://95.182.89.105/data_mipsel-uclibc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885297/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43b1cb38-813c-5141-b1db-76e9bb8f0e91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.182.89.105/data_x86",
      "pattern": "[url:value = 'http://95.182.89.105/data_x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885298/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c5c79d3-e40f-5b2b-9c53-5464d36900fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hksv.bahigo90bet.com/2006c26f-48a0-4547-acf3-eab01d3aed07",
      "pattern": "[url:value = 'https://hksv.bahigo90bet.com/2006c26f-48a0-4547-acf3-eab01d3aed07']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T03:06:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885295/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccb2f8ca-8f02-51b6-b5a8-1b6001c94769",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.185.64.34:55053/i",
      "pattern": "[url:value = 'http://123.185.64.34:55053/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:35:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885294/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67719560-96b6-5afe-a4d2-38eb2c80da58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.arm5",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885288/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9169a8f-5762-557c-8124-a5eeb2caf030",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.x86_64",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885289/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0ce5ef3-b6b9-5d21-8d72-5cd1da387ba2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.mips",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885290/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd54ce0c-b8d1-5790-9622-1e897a1531cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/busywget.sh",
      "pattern": "[url:value = 'http://64.89.163.215/bins/busywget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885291/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--821a8d1f-7305-5075-b487-9e1496986b5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.ppc",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885292/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c44348fd-9c92-5b04-813a-6894b0fee221",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.m68k",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885293/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9721fde8-97bb-568e-814c-617e6d26a87c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.x86",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885283/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19a4a352-f0ef-51c5-b840-6c24883b2242",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.mpsl",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885284/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7fff1e4-76b4-5aa0-9cef-0d88ab725085",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.arm6",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885285/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--853f5bcf-8e63-524c-9520-244a7699a1db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.arm",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885286/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef45a660-0f09-547e-93ca-d78b7661611a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/wget.sh",
      "pattern": "[url:value = 'http://64.89.163.215/bins/wget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885287/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14b39a48-41fd-59bb-b714-2a3004438fe6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/putita.arm7",
      "pattern": "[url:value = 'http://64.89.163.215/bins/putita.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885281/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--baaee296-1807-52aa-b743-d59bde1b4a23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/callaputa.sh",
      "pattern": "[url:value = 'http://64.89.163.215/bins/callaputa.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885282/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cb3833f-8627-5bf9-a65c-bb2d90e963e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/curl.sh",
      "pattern": "[url:value = 'http://64.89.163.215/bins/curl.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885279/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e5952c6-7d52-5610-9468-74acc8122517",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.89.163.215/bins/busycurl.sh",
      "pattern": "[url:value = 'http://64.89.163.215/bins/busycurl.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:32:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885280/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bde27ca7-1f7e-5efa-b219-73d28bdc30e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.80.61.25:36540/i",
      "pattern": "[url:value = 'http://39.80.61.25:36540/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:30:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885278/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5194f74-c58b-547e-a084-f61830e6d641",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.3.251:46046/i",
      "pattern": "[url:value = 'http://110.37.3.251:46046/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:21:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885277/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d343a7d-d766-5d3f-9b52-8d9acc77f0bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nisosznd.jadoobet.club/50c0143e-5692-4bb5-87b0-c58591c2abda",
      "pattern": "[url:value = 'https://nisosznd.jadoobet.club/50c0143e-5692-4bb5-87b0-c58591c2abda']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885276/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01e6854f-e1e1-5995-9bc4-87f3f6107078",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.156.98.16:41238/i",
      "pattern": "[url:value = 'http://219.156.98.16:41238/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:09:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885275/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3f99163-489f-5ebc-b863-6a0fce81f9d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.227.5.89:41311/i",
      "pattern": "[url:value = 'http://42.227.5.89:41311/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:05:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9a3b6c8-c4ea-5824-b4e4-837afae63eb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lmhk.bahigo.casino/c0fc735b-cac9-4a5c-9637-a7b6d071b954",
      "pattern": "[url:value = 'https://lmhk.bahigo.casino/c0fc735b-cac9-4a5c-9637-a7b6d071b954']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:05:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90ec2c5b-0464-5960-80e2-7b5ffe722ff9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.185.64.34:55053/bin.sh",
      "pattern": "[url:value = 'http://123.185.64.34:55053/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:04:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcebb9f9-e238-507a-bb39-9ff91dab15fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.156.98.16:41238/bin.sh",
      "pattern": "[url:value = 'http://219.156.98.16:41238/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T02:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e2bca43-f053-5b8e-8351-b20bdcc70880",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.3.251:46046/bin.sh",
      "pattern": "[url:value = 'http://110.37.3.251:46046/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:51:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d15ab54f-fe19-541b-9cc5-1879105770de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zfs6aubs.betropol.bet/?ublib=f7479ddf-5ef0-4975-9498-c0a77eeed5d7",
      "pattern": "[url:value = 'https://zfs6aubs.betropol.bet/?ublib=f7479ddf-5ef0-4975-9498-c0a77eeed5d7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:33:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94e18f02-6b61-533a-9de0-e601cf415cff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://osgeorhf.bekabet.casino/5bf101ec-fd3d-44b1-9c8e-2457fc95fa5a",
      "pattern": "[url:value = 'https://osgeorhf.bekabet.casino/5bf101ec-fd3d-44b1-9c8e-2457fc95fa5a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:28:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e0d9952-14db-5938-97b4-9141493589f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.208.60:37800/i",
      "pattern": "[url:value = 'http://42.231.208.60:37800/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:22:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c305391-dc7b-5ed0-aca0-81e472b39d0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.156.166.84:53500/bin.sh",
      "pattern": "[url:value = 'http://94.156.166.84:53500/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c8e25b6-2edd-5f5a-a43c-dfd462923274",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.107.86:55727/i",
      "pattern": "[url:value = 'http://115.61.107.86:55727/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:07:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eec8e01c-15e6-511f-ab6d-68b3793f094b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.208.60:37800/bin.sh",
      "pattern": "[url:value = 'http://42.231.208.60:37800/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa2521ef-f24e-5f31-926c-4c20a195c6df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fhqc.backgammon.download/bc1e7cf3-4048-4863-84c9-d919352d799b",
      "pattern": "[url:value = 'https://fhqc.backgammon.download/bc1e7cf3-4048-4863-84c9-d919352d799b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T01:06:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99e7f9ed-618f-51ea-8844-3e9a3f2bb121",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.107.86:55727/bin.sh",
      "pattern": "[url:value = 'http://115.61.107.86:55727/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:47:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a022a7cb-56a4-5362-bc7a-c77f2c623b14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.72.77:43672/i",
      "pattern": "[url:value = 'http://42.231.72.77:43672/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:37:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--feba5e69-d003-5451-811d-1a3f7e7e7b15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.122.172:36476/i",
      "pattern": "[url:value = 'http://222.141.122.172:36476/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:37:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b28efdf0-5ac1-54da-b782-d917570590ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nwhygnbt.behtarin-site-shartbandi.com/f96170d1-4630-461b-9fd4-06c40b906e2b",
      "pattern": "[url:value = 'https://nwhygnbt.behtarin-site-shartbandi.com/f96170d1-4630-461b-9fd4-06c40b906e2b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f5badba-710b-5d3c-87b4-821981131b8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.230.66.84:47167/i",
      "pattern": "[url:value = 'http://115.230.66.84:47167/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:23:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f07ab4c3-9c7b-55c3-a902-0cffff602a7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.174.49.0:39916/i",
      "pattern": "[url:value = 'http://175.174.49.0:39916/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:21:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--493ac7ac-c5b0-5a69-beda-6afe8df4bc3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.206.79.184:57781/i",
      "pattern": "[url:value = 'http://27.206.79.184:57781/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:17:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--782fb6ed-503c-5e8f-b75b-f8f1e2323c4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.122.172:36476/bin.sh",
      "pattern": "[url:value = 'http://222.141.122.172:36476/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:17:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd20a61a-1ef3-5bb1-856c-e034bfd641a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.86.67:39010/i",
      "pattern": "[url:value = 'http://110.37.86.67:39010/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f67e8f5-a904-545a-aaa5-d2fffb495fe8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.210.117:46841/i",
      "pattern": "[url:value = 'http://182.121.210.117:46841/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8317b04-9642-5782-9f08-ecb59b569764",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vlfnosj4.bazisangkaqazgeychidancepoli.com/?ublib=bccb006c-9183-4bea-9ec3-673a9c4a6db3",
      "pattern": "[url:value = 'https://vlfnosj4.bazisangkaqazgeychidancepoli.com/?ublib=bccb006c-9183-4bea-9ec3-673a9c4a6db3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:14:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4b18677-30ce-5a1f-83fe-e5d09f32aa62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sh6ze53a.bet90forward.win/?ublib=50b18fa6-c8a1-43e0-8add-f5304ffe4957",
      "pattern": "[url:value = 'https://sh6ze53a.bet90forward.win/?ublib=50b18fa6-c8a1-43e0-8add-f5304ffe4957']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:05:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb21887a-7651-5fff-ab3b-609de8204134",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lskz.bettilt90.com/dc28a2fe-6f09-4bc7-8be3-d7b84ab50cd7",
      "pattern": "[url:value = 'https://lskz.bettilt90.com/dc28a2fe-6f09-4bc7-8be3-d7b84ab50cd7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-12T00:04:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76044d34-d880-579f-a75a-aaf7634155d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.174.49.0:39916/bin.sh",
      "pattern": "[url:value = 'http://175.174.49.0:39916/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:55:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--898e41d3-8ecf-5022-962f-08fca24117a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.206.79.184:57781/bin.sh",
      "pattern": "[url:value = 'http://27.206.79.184:57781/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:52:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f041266c-132d-58e1-90e2-f5ec019c21c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.117.27.59:51437/i",
      "pattern": "[url:value = 'http://182.117.27.59:51437/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:47:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd87e6bf-ee62-5a3b-91cc-70062ae21045",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.86.67:39010/bin.sh",
      "pattern": "[url:value = 'http://110.37.86.67:39010/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:46:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c657c384-fb54-59fb-b815-947fdc9b4446",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wntzwdju.betpublic.casino/?ublib=346122e0-8ee6-4fca-8b70-9cd10d0dfd8c",
      "pattern": "[url:value = 'https://wntzwdju.betpublic.casino/?ublib=346122e0-8ee6-4fca-8b70-9cd10d0dfd8c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:35:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a8e100e-ee4d-5807-96bc-1c66fe0efc3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://etoncwgd.behtarin-site-shartbandi-football.com/42df99ab-5aaf-42b0-b85d-a9516bbd73df",
      "pattern": "[url:value = 'https://etoncwgd.behtarin-site-shartbandi-football.com/42df99ab-5aaf-42b0-b85d-a9516bbd73df']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:34:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fe5ca79-c42d-5559-8bc7-b526950b8931",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.246.11.204:57516/i",
      "pattern": "[url:value = 'http://112.246.11.204:57516/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:32:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3df105a4-6dcb-5e37-bca4-14c967c30d4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://122.243.151.244:35817/i",
      "pattern": "[url:value = 'http://122.243.151.244:35817/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:21:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4751f949-24fa-5f8f-a16b-c83dd80266bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.246.11.204:57516/bin.sh",
      "pattern": "[url:value = 'http://112.246.11.204:57516/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:17:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c8199ab-f063-5d76-95e5-aed54eb85a22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://oxlg.betraca.bet/a7df4c19-4ad8-4b1c-b073-8871a3896d40",
      "pattern": "[url:value = 'https://oxlg.betraca.bet/a7df4c19-4ad8-4b1c-b073-8871a3896d40']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:08:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1739e97-743b-527c-8f08-b0942e143af2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.126.62:36254/bin.sh",
      "pattern": "[url:value = 'http://222.138.126.62:36254/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:07:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76f6d716-676c-5881-8558-035c75117c93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.116.131.31:54163/bin.sh",
      "pattern": "[url:value = 'http://119.116.131.31:54163/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T23:07:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43046c03-5cf1-5380-a72f-a63d74f5c0b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nxiyquas.behtarin-site-shartbandi-football.bet/69f0bdff-a617-45fb-827b-1688bb73c09d",
      "pattern": "[url:value = 'https://nxiyquas.behtarin-site-shartbandi-football.bet/69f0bdff-a617-45fb-827b-1688bb73c09d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T22:40:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7349cf57-3e46-593d-b404-495f3945d111",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.127.135:36933/bin.sh",
      "pattern": "[url:value = 'http://110.37.127.135:36933/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T22:31:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9ffecc6-6938-5bb9-b994-a1cb7a288778",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.31.182:55872/i",
      "pattern": "[url:value = 'http://110.37.31.182:55872/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T22:17:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b35fd35c-fbab-5dac-9eab-a6bac6ee4606",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://uonh.bahsegel90.com/52059b34-b927-46b8-b40e-818160331e5e",
      "pattern": "[url:value = 'https://uonh.bahsegel90.com/52059b34-b927-46b8-b40e-818160331e5e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T22:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef0fbf80-c25c-532c-8676-176212497f6d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://orjrdtyn.site-shartbandi-khareji.com/8ef1d571-e5c1-4dbc-8060-f828b2e0490c",
      "pattern": "[url:value = 'https://orjrdtyn.site-shartbandi-khareji.com/8ef1d571-e5c1-4dbc-8060-f828b2e0490c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:46:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11682edf-e7ca-5d09-9318-a9b8fcb4e1f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.15.1:47461/i",
      "pattern": "[url:value = 'http://110.36.15.1:47461/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:45:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4220d1e7-cea4-5c58-8b0f-d462f76c0f00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.179.239.23:37650/bin.sh",
      "pattern": "[url:value = 'http://119.179.239.23:37650/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:44:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07206be0-9793-5038-baf9-e67a0ba130cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.90.185.248:48598/i",
      "pattern": "[url:value = 'http://39.90.185.248:48598/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:44:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34286bfa-49e4-55e8-8e5b-d21b0a27e1ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.0.185:44672/i",
      "pattern": "[url:value = 'http://182.127.0.185:44672/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:44:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b256bcdb-f3f5-5794-903a-3d3193e97d7d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://157.66.146.183:48011/i",
      "pattern": "[url:value = 'http://157.66.146.183:48011/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:43:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76b1245c-bc37-5a52-ab91-1e4a021471a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.189.198.193:44465/i",
      "pattern": "[url:value = 'http://196.189.198.193:44465/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:39:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c19ac755-6361-5fcd-9f77-c999cf48b4da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://157.66.146.183:48011/bin.sh",
      "pattern": "[url:value = 'http://157.66.146.183:48011/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:39:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c70b635-c40f-5eb6-ac1b-ee092ad86acd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.10.153.185:55114/i",
      "pattern": "[url:value = 'http://123.10.153.185:55114/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:35:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bc652e6-ab9f-57c8-8561-8518999d1f4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://s7rpvlti.bahigo.casino/?ublib=6ecf8471-34fc-4923-85f5-fddb674467c9",
      "pattern": "[url:value = 'https://s7rpvlti.bahigo.casino/?ublib=6ecf8471-34fc-4923-85f5-fddb674467c9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:34:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3492ec3-76d5-521f-9ee5-a2b9946899d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.31.182:55872/bin.sh",
      "pattern": "[url:value = 'http://110.37.31.182:55872/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:22:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3d76981-4245-5a52-a434-bd39cfe7dcf9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://1.61.201.77:37817/i",
      "pattern": "[url:value = 'http://1.61.201.77:37817/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2642a746-be45-5969-b007-fcda7ed0c48a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.15.1:47461/bin.sh",
      "pattern": "[url:value = 'http://110.36.15.1:47461/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:15:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b675a4da-b84a-56d8-8f1f-bde744586cbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.188.79.78:45414/bin.sh",
      "pattern": "[url:value = 'http://123.188.79.78:45414/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:12:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8b18b2e-2981-5ab8-9f55-3c58c272bbc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.10.153.185:55114/bin.sh",
      "pattern": "[url:value = 'http://123.10.153.185:55114/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:09:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f900620-98c0-505b-84bd-04e4ab9659a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jnjv.bahigo90bet.com/fce62c5e-93d1-4895-be74-7d1464e80ed7",
      "pattern": "[url:value = 'https://jnjv.bahigo90bet.com/fce62c5e-93d1-4895-be74-7d1464e80ed7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T21:03:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8735459f-8e27-5da3-94b4-2e5fb694cba7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://101.22.41.112:47649/i",
      "pattern": "[url:value = 'http://101.22.41.112:47649/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:54:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f49721bd-8116-5f01-a434-e2b7dc47a129",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://puqrhdze.onjabet1.com/6f897d0a-a686-47a1-bdf8-67d20e9fae19",
      "pattern": "[url:value = 'https://puqrhdze.onjabet1.com/6f897d0a-a686-47a1-bdf8-67d20e9fae19']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:48:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c7f5822-d377-57e7-8a07-b366f49ab497",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://162.255.251.91:36557/i",
      "pattern": "[url:value = 'http://162.255.251.91:36557/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:37:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6352b28-f6cf-5ce6-aaf4-880db56f476b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.99.250.219:43060/i",
      "pattern": "[url:value = 'http://119.99.250.219:43060/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:29:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac4db251-8ddc-5a8a-abac-29e64f5b5ee4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/bot",
      "pattern": "[url:value = 'http://94.154.43.42/bin/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:29:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51eb38f0-3f06-5620-ae12-b83f2130f602",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/bot",
      "pattern": "[url:value = 'http://94.154.43.42/bins/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:28:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00b602f1-430c-5e59-b391-33fd65883ffe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/bot",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:28:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93cfd320-247e-5346-bd7a-93b217d7bf19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bot",
      "pattern": "[url:value = 'http://94.154.43.42/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:28:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885905/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73e64012-d19f-52cb-b530-8b151c598b44",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.229.221.175:54079/i",
      "pattern": "[url:value = 'http://42.229.221.175:54079/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:27:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f31f22e3-4eb9-598b-91a6-ca2df756a405",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.255.73:39772/i",
      "pattern": "[url:value = 'http://115.57.255.73:39772/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:22:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a87080b5-81f5-5e11-beea-d4bf8cc0efa5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.156.99.10:45205/i",
      "pattern": "[url:value = 'http://219.156.99.10:45205/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:17:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a93942d-37ce-5f11-813d-13863fa0ee06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://162.255.251.91:36557/bin.sh",
      "pattern": "[url:value = 'http://162.255.251.91:36557/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:14:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f82d8374-9e8a-504e-870d-f1b5c9872c50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.207.225.43:40906/i",
      "pattern": "[url:value = 'http://27.207.225.43:40906/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:04:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b8fa224-6d3f-5457-9ae3-df85d525f4ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://iwyx.bekabet.casino/1dd6528f-c457-4847-8ad3-b379426ae55c",
      "pattern": "[url:value = 'https://iwyx.bekabet.casino/1dd6528f-c457-4847-8ad3-b379426ae55c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:04:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf5c1c4c-cd88-5cd0-96d6-0da4531e3513",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://109.226.203.246:38639/i",
      "pattern": "[url:value = 'http://109.226.203.246:38639/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T20:03:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a441fa7-e5a5-5cf4-855c-bc02c6c7d42d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.172.124:42236/i",
      "pattern": "[url:value = 'http://61.52.172.124:42236/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:57:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9373632-8c5a-5429-8d28-b5e1f5296312",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.254.156.154:45877/bin.sh",
      "pattern": "[url:value = 'http://112.254.156.154:45877/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:57:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b621f823-9e7a-518f-897a-47e6e7331dd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.229.221.175:54079/bin.sh",
      "pattern": "[url:value = 'http://42.229.221.175:54079/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:57:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96a951c9-0e8a-52a0-bd78-c5732c5faa0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tjsojdll.betropol.bet/11160c4a-784a-4d44-8b12-4620eb1fd56d",
      "pattern": "[url:value = 'https://tjsojdll.betropol.bet/11160c4a-784a-4d44-8b12-4620eb1fd56d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:53:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29a61332-ac29-5f3f-b313-082700f8f2d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.172.124:42236/bin.sh",
      "pattern": "[url:value = 'http://61.52.172.124:42236/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:51:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cc09692-d3d8-517a-95ae-edbd2bfb518d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.156.99.10:45205/bin.sh",
      "pattern": "[url:value = 'http://219.156.99.10:45205/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:51:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--102621da-fb47-563d-84b5-5d772b5c3d66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.177.97:60804/i",
      "pattern": "[url:value = 'http://115.52.177.97:60804/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:46:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bdc850a-22b9-5318-b4f9-1bd0fedb3cb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.207.225.43:40906/bin.sh",
      "pattern": "[url:value = 'http://27.207.225.43:40906/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:44:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adf7e4a6-1dc4-5625-ac64-7a0925305dd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.214.58.128:50647/i",
      "pattern": "[url:value = 'http://60.214.58.128:50647/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:37:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aeb56c7-3f78-5893-ac08-34ae2ec733e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://5jsdebh3.backgammon.download/?ublib=5ef23ea6-ab91-463b-a597-89df868fa0ed",
      "pattern": "[url:value = 'https://5jsdebh3.backgammon.download/?ublib=5ef23ea6-ab91-463b-a597-89df868fa0ed']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:31:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09c87665-9cb5-50fa-aa31-892e1aa76f24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.95.48:60918/i",
      "pattern": "[url:value = 'http://27.215.95.48:60918/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:30:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--763ab49b-d602-59e8-90c0-da998835a82b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.146.241.30:38131/i",
      "pattern": "[url:value = 'http://175.146.241.30:38131/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:26:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b5d9998-c5d9-5608-9ac5-26be312548e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.202.235.64:47172/i",
      "pattern": "[url:value = 'http://27.202.235.64:47172/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:24:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--433acd0f-092b-5e80-b831-f80e066eb28a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://101.109.81.222:58644/i",
      "pattern": "[url:value = 'http://101.109.81.222:58644/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:24:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c82b8440-2169-5cb6-970c-490ab43a2d4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.208.197.30/client.exe",
      "pattern": "[url:value = 'http://91.208.197.30/client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:15:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d0e8623-42d0-5c3f-a34c-7d643c72ed43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.230.35.67:58601/i",
      "pattern": "[url:value = 'http://42.230.35.67:58601/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:13:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7880c19-8160-5cb1-bfa1-b8ff138d7052",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://31.57.105.94/cache",
      "pattern": "[url:value = 'http://31.57.105.94/cache']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:12:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ae14b50-2962-53e4-a248-5a052e571f15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.177.97:60804/bin.sh",
      "pattern": "[url:value = 'http://115.52.177.97:60804/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:11:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1021ac8a-e977-58e2-9b21-addfbf1afa5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.102.72:33000/i",
      "pattern": "[url:value = 'http://222.138.102.72:33000/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:11:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aedab79e-51a9-55ef-ada0-63f859c07b1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://eksq11dg.dancebet90.app/?ublib=d9cd1ebe-ef6d-4bdf-82e4-891466ecc3a6",
      "pattern": "[url:value = 'https://eksq11dg.dancebet90.app/?ublib=d9cd1ebe-ef6d-4bdf-82e4-891466ecc3a6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:05:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ff35f1e-ee10-58d5-bcd3-10cd1baaf17a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.95.48:60918/bin.sh",
      "pattern": "[url:value = 'http://27.215.95.48:60918/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:04:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edde884d-3372-5c30-8cc3-bc1207e8f90e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.201.66.237:51337/i",
      "pattern": "[url:value = 'http://220.201.66.237:51337/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:04:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdbff9ce-feb0-5789-ab48-7455ba339bca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lpzi.behtarin-site-shartbandi.com/a7da215d-6637-46e5-9dfd-90b7a6dc8132",
      "pattern": "[url:value = 'https://lpzi.behtarin-site-shartbandi.com/a7da215d-6637-46e5-9dfd-90b7a6dc8132']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:02:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbe4b1df-f26b-5b16-96cf-7a31af21143e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://101.109.81.222:58644/bin.sh",
      "pattern": "[url:value = 'http://101.109.81.222:58644/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T19:00:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ca4b7ca-8c23-59e9-adf8-bdd1cba6421f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.146.241.30:38131/bin.sh",
      "pattern": "[url:value = 'http://175.146.241.30:38131/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:56:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e6c732a-fa91-5135-b433-0f9bd9fc9c71",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://llgdqtat.betpublic.casino/fcdc8d65-4cd2-47ce-91b7-77089fa7122f",
      "pattern": "[url:value = 'https://llgdqtat.betpublic.casino/fcdc8d65-4cd2-47ce-91b7-77089fa7122f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d23b583-1d3c-5fbb-841d-62fd288e0dc3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.10.155:54576/i",
      "pattern": "[url:value = 'http://182.116.10.155:54576/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:51:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6e11738-ec77-5c53-9155-55d7a96ceeaa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.117.241:33500/i",
      "pattern": "[url:value = 'http://222.138.117.241:33500/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:50:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--feb163d4-c399-5a14-a779-ca485b78ff57",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.230.35.67:58601/bin.sh",
      "pattern": "[url:value = 'http://42.230.35.67:58601/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:47:54Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5c76445-c572-575d-976a-d8f3f0def030",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.138.117.241:33500/bin.sh",
      "pattern": "[url:value = 'http://222.138.117.241:33500/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:32:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c66b58f1-3cb2-523b-8a94-8083a58d5ad8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/3.sh",
      "pattern": "[url:value = 'http://41.216.189.92/3.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d13a156c-c9c6-5e68-bd1b-67ea62cb4243",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/c.sh",
      "pattern": "[url:value = 'http://41.216.189.92/nz/c.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55f09f67-1728-54a7-93ff-f8ad82bb278a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/2.sh",
      "pattern": "[url:value = 'http://41.216.189.92/2.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e2c8038-3ccd-551d-bdfa-dad014f59ccd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/c.sh",
      "pattern": "[url:value = 'http://41.216.189.92/c.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d07fb35-3947-5350-bc00-ae15d349e962",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/w.sh",
      "pattern": "[url:value = 'http://41.216.189.92/w.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--387ee65b-6735-522d-8a15-0ed8216adc08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/w.sh",
      "pattern": "[url:value = 'http://41.216.189.92/nz/w.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e36bff5-3456-56b4-8844-bc360cce52f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/wget.sh",
      "pattern": "[url:value = 'http://41.216.189.92/nz/wget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0842379f-665c-54cb-b575-4a15b8ad3d85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/wget.sh",
      "pattern": "[url:value = 'http://41.216.189.92/wget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:31:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5e81fd9-ea19-5024-b70e-c6c22197f0a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.10.155:54576/bin.sh",
      "pattern": "[url:value = 'http://182.116.10.155:54576/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:22:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff19b7a2-08a5-591d-9b41-4f538badb869",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.90.187.107:37939/i",
      "pattern": "[url:value = 'http://39.90.187.107:37939/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:18:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31da7701-a63b-5b19-8fed-fad1d0833ebc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.23.101:33716/i",
      "pattern": "[url:value = 'http://182.116.23.101:33716/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:16:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30cb2f70-bfaa-5f60-8b35-1d1be5a06fce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.97.253.52:38807/i",
      "pattern": "[url:value = 'http://59.97.253.52:38807/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:16:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a36b9c9f-7659-5683-b736-9c52e00e3ee5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.157.179.136:44096/i",
      "pattern": "[url:value = 'http://219.157.179.136:44096/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:16:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3eab1c19-3a94-50ac-932b-7a8d0201387a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.90.187.107:37939/bin.sh",
      "pattern": "[url:value = 'http://39.90.187.107:37939/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:13:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--134b3a00-9d21-544c-a946-588124e5aa7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.13.213:43668/bin.sh",
      "pattern": "[url:value = 'http://110.37.13.213:43668/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:07:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eafee5a-227d-5678-b033-f14bd5987e1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bqvojtsj.betgar.bet/f62200ea-99ad-44de-8400-df1475a22df8",
      "pattern": "[url:value = 'https://bqvojtsj.betgar.bet/f62200ea-99ad-44de-8400-df1475a22df8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:03:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--463270f4-88d1-5436-9e85-7a8c6a56c32d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://prre.behtarin-site-shartbandi-football.com/62f95eb8-2c24-4102-a293-430d83f58366",
      "pattern": "[url:value = 'https://prre.behtarin-site-shartbandi-football.com/62f95eb8-2c24-4102-a293-430d83f58366']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T18:02:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6a20817-8b5c-5c91-bbb8-ce497e566dc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.136.52.228:41540/bin.sh",
      "pattern": "[url:value = 'http://222.136.52.228:41540/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:56:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26c4f039-ab61-576c-a68c-7afca10fdcd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.157.179.136:44096/bin.sh",
      "pattern": "[url:value = 'http://219.157.179.136:44096/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:56:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fef34f92-ad31-5f5e-a5c8-767ba4db0655",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.178.60.31:34929/i",
      "pattern": "[url:value = 'http://42.178.60.31:34929/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:52:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6e33e63-36d7-5c9e-9c11-c4c6d8cb569a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.245.229:56711/i",
      "pattern": "[url:value = 'http://112.248.245.229:56711/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:51:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e788ce0-36c9-5a3d-a62f-2093a9f236f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.23.101:33716/bin.sh",
      "pattern": "[url:value = 'http://182.116.23.101:33716/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:50:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dfc5a88-ec66-5b0f-85d7-1ececf75e5fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.44.133.78:57678/i",
      "pattern": "[url:value = 'http://59.44.133.78:57678/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:38:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfa5d1fd-f702-5e22-84af-93a152f4d17c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.249.71:55271/i",
      "pattern": "[url:value = 'http://115.57.249.71:55271/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:35:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4777c641-185c-55e7-8c1f-a5c1377dc50c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qs268cl5.radioshartbandi.bet/?ublib=e05797da-89bf-4038-a35d-ace09e9f0989",
      "pattern": "[url:value = 'https://qs268cl5.radioshartbandi.bet/?ublib=e05797da-89bf-4038-a35d-ace09e9f0989']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:32:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--167fdf74-0c05-5e3c-a605-c8708c429f7d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.178.60.31:34929/bin.sh",
      "pattern": "[url:value = 'http://42.178.60.31:34929/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:30:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--004f9a22-df71-5314-a50e-d1346ce2b0d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.249.71:55271/bin.sh",
      "pattern": "[url:value = 'http://115.57.249.71:55271/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:09:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72b35925-d59d-531c-9871-5d7372e4cddb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wrryvujx.zaribbala.bet/08b7f398-c406-4d05-bcf9-175ca871c62e",
      "pattern": "[url:value = 'https://wrryvujx.zaribbala.bet/08b7f398-c406-4d05-bcf9-175ca871c62e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:07:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25b42d3c-7aa1-50b4-8fb0-fb689de7b5e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.127.135:36933/i",
      "pattern": "[url:value = 'http://110.37.127.135:36933/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22246f61-bc6b-545f-a783-baff31b6b1c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://uyxg.behtarin-site-shartbandi-football.bet/5db8636a-c81c-434b-bfb6-f7bec049131f",
      "pattern": "[url:value = 'https://uyxg.behtarin-site-shartbandi-football.bet/5db8636a-c81c-434b-bfb6-f7bec049131f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:03:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41c76b3a-8087-5bdf-abe9-fa00c76dfa83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.44.133.78:57678/bin.sh",
      "pattern": "[url:value = 'http://59.44.133.78:57678/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T17:00:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--640e8174-40b0-5081-901a-43c4421126d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.101.102.121:54675/i",
      "pattern": "[url:value = 'http://103.101.102.121:54675/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:56:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65cb51b4-9085-5258-9cfd-8d47d9de5f34",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDx86",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDx86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:51:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2be86878-9c28-5c1e-9c81-5d0fd95a9ef2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDspc",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDspc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:51:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79d95c46-40e0-5568-8b14-e42082a8e3ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDm68k",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDm68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:51:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--745be27a-05b7-58d8-8275-77b38e4f5a67",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDppc",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:51:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8512c829-5f9a-5946-bfdf-036215b2d097",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDmpsl",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDmpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b4ef013-13d3-5efc-b00d-43591221483f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDarm5",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDarm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8df63df4-5d77-5c78-9ae6-a58ecd6ddcc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDmips",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDmips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac968f51-4dd7-580b-8101-5c58ba8e44a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDsh4",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDsh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--812c8cea-9dd0-59f4-92d5-85921000841d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/HMugenXrevamped.sh",
      "pattern": "[url:value = 'http://45.90.163.37/HMugenXrevamped.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2d06ffd-159e-5aa0-9fd1-219de2aa06c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDarm",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDarm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--107a3024-e61f-587a-b83e-2021015dcc8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDarm6",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDarm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2271a9b-2924-58df-b8ec-8f1620fdb373",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GoonGang/XDarm7",
      "pattern": "[url:value = 'http://45.90.163.37/GoonGang/XDarm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f381892-f5d1-5e32-aa97-15cbd48bef88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.122.246.125:47263/i",
      "pattern": "[url:value = 'http://182.122.246.125:47263/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:47:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a74a3035-8acd-5376-9e91-1f9d6717e288",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.64.31:45088/bin.sh",
      "pattern": "[url:value = 'http://110.37.64.31:45088/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:46:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a776203a-8e7b-5b99-bfe4-cd9c0a56b815",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.188.141.17:38188/i",
      "pattern": "[url:value = 'http://196.188.141.17:38188/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:32:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffd61711-8133-5a18-8601-75d0f1746c20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.101.102.121:54675/bin.sh",
      "pattern": "[url:value = 'http://103.101.102.121:54675/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:16:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8638a139-bc38-5cb0-bc43-fcaf147bcb78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://118.232.137.101:35632/i",
      "pattern": "[url:value = 'http://118.232.137.101:35632/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:16:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--731a31aa-31b6-5e36-9213-159e01ffa8af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jxiluxhf.radioshartbandi.chat/d1ce0ccb-6cf1-491b-ac4d-9aad250d59b0",
      "pattern": "[url:value = 'https://jxiluxhf.radioshartbandi.chat/d1ce0ccb-6cf1-491b-ac4d-9aad250d59b0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T16:11:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df2cfc76-7290-5c0d-87d2-e9edc692e462",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://118.232.137.101:35632/bin.sh",
      "pattern": "[url:value = 'http://118.232.137.101:35632/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:57:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95e6fd34-8b0e-5531-a944-11f3c24ad3f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.56.144.76:46286/i",
      "pattern": "[url:value = 'http://115.56.144.76:46286/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:54:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c76eb2-fbdc-5379-94bd-dd85c4bed743",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.56.144.76:46286/bin.sh",
      "pattern": "[url:value = 'http://115.56.144.76:46286/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:50:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a9db6c3-b3cb-5b62-be4c-05ef36a7f8c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tglc.bahsegel90.com/550d27af-f70d-448f-8781-78ec5fc2e1e4",
      "pattern": "[url:value = 'https://tglc.bahsegel90.com/550d27af-f70d-448f-8781-78ec5fc2e1e4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:48:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abd4ed3f-2953-57ec-a636-f568f7b6128a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xb7ea3kq.betturkey.bet/?ublib=264b8747-abf1-43ac-b247-b213012b8388",
      "pattern": "[url:value = 'https://xb7ea3kq.betturkey.bet/?ublib=264b8747-abf1-43ac-b247-b213012b8388']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:31:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dea000d3-b8ac-5cb7-9d61-3613c4c04205",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.225.241.199:37473/bin.sh",
      "pattern": "[url:value = 'http://42.225.241.199:37473/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:30:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d15ea53-14f4-55e4-b506-859418d9d3ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://124.131.186.170:45557/bin.sh",
      "pattern": "[url:value = 'http://124.131.186.170:45557/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:30:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7526dad-1407-52d9-8c60-81a7e1042df7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.sh4",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b1a0fcf-482e-50cb-817f-1fce640ade21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/debug",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/debug']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58d7906b-24e5-5a3c-b4ad-ca6249fea414",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.arm7",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8860587a-c87b-5317-9e92-87041ecfd624",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.arm5",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59a7c3b1-38e9-582a-b10d-a4a0103fdaae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.mpsl",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80660743-972b-55e0-b73b-3632be0bab9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.ppc",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da43352d-450e-5898-b104-ad4ea1e29826",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.mips",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4261cec-2dd6-5703-9e38-1bea6e86663f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.x86_64",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--906d3201-06e1-5abe-a4bb-b30b69962e4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.arm",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc111e3d-bb59-58fc-82ad-c17e86955eb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr.sh",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8edb627-c89c-568b-b256-05fc33191c3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.m68k",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8efc28c3-2d5f-511a-825f-c1f5ae627dba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.spc",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72a103c4-f3a7-5ac3-96ed-02ff7e1400c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.arc",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cec53c7c-5b71-5167-9bbd-ac1a5867840b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.x86",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0f1b522-f107-56db-9517-c5d64a34b332",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.i686",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:19:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0cc8573-6aa6-5c20-ad0d-92d532c278f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/titanjr/titanjr.arm6",
      "pattern": "[url:value = 'http://94.154.43.192/titanjr/titanjr.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:18:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa124505-c572-524a-a702-d3ea32bc2a9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gtcymxsv.onjabet1.com/6679a7fe-5909-4912-88d1-936fa987938c",
      "pattern": "[url:value = 'https://gtcymxsv.onjabet1.com/6679a7fe-5909-4912-88d1-936fa987938c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:16:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b5f1795-7457-5990-bdc9-26fa3546491f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://80.96.58.112/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://80.96.58.112/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:13:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d084797f-fa54-5db6-b525-718c705492cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://80.97.124.66/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://80.97.124.66/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a705b32a-7de2-53da-b857-3781f201dfdb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://85.120.252.216/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://85.120.252.216/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:09:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b18aada-9b99-5595-a3e3-b3a82438a9ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.85.7.216:41048/i",
      "pattern": "[url:value = 'http://42.85.7.216:41048/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:06:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52e3ac6d-1054-5b3b-95b7-13e48e982759",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://files-storage.su/core/1.zip",
      "pattern": "[url:value = 'https://files-storage.su/core/1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--183ab747-f2e0-55d5-b472-c30e9d32c011",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://genesis-softs.com/powershell/Genesis.ps1",
      "pattern": "[url:value = 'https://genesis-softs.com/powershell/Genesis.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b406fe45-f7e8-5176-a3c0-6ab53cc23692",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/0c086e9dec2646afaae25a4d6d279141.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/0c086e9dec2646afaae25a4d6d279141.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6f2e5a8-4e1b-558e-8f47-e2857e3eb524",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.161.42/x86",
      "pattern": "[url:value = 'http://45.90.161.42/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--208a26b4-0e29-59bd-841a-8d6f39912baa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.220.101.47/bins/sora.x86",
      "pattern": "[url:value = 'http://185.220.101.47/bins/sora.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1539f83-f78a-5cef-bd03-8c769f1eda66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.161.42/arm7",
      "pattern": "[url:value = 'http://45.90.161.42/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a24bf972-056e-5980-bffa-b8dff3063a64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.220.101.47/bins/mirai.arm7",
      "pattern": "[url:value = 'http://185.220.101.47/bins/mirai.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1896bfd-11f0-578d-9516-62550a8837e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_86902656709d1658.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_86902656709d1658.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T15:03:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daf944a9-b539-5526-b52a-cd2f199760a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.68.168.193:42212/bin.sh",
      "pattern": "[url:value = 'http://219.68.168.193:42212/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:52:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ca6bb76-475c-562b-a447-34f3628bf165",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xbvj.bahigo90bet.com/ea8ff24c-4a6f-40da-bea7-8a9cafe3400d",
      "pattern": "[url:value = 'https://xbvj.bahigo90bet.com/ea8ff24c-4a6f-40da-bea7-8a9cafe3400d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:50:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c33e5e72-ee46-5993-b299-a953f542efe2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.103.166.138/download",
      "pattern": "[url:value = 'http://185.103.166.138/download']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:46:44Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--164db373-d713-5ca5-8520-84920d66385c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.40.26.196:37453/bin.sh",
      "pattern": "[url:value = 'http://125.40.26.196:37453/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:42:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6adc18eb-c230-5700-9baa-6822986ab7cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.85.7.216:41048/bin.sh",
      "pattern": "[url:value = 'http://42.85.7.216:41048/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:42:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6e43b81-a405-5996-b41b-f8b11e0d1d9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.227.165:43809/i",
      "pattern": "[url:value = 'http://61.52.227.165:43809/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:38:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3799bc26-1a81-538d-9e53-d6ca8e1896c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.48.248.48:9999/bot.csky",
      "pattern": "[url:value = 'http://194.48.248.48:9999/bot.csky']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885079/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eef48b49-a000-5ec0-bf8d-05a6821bf588",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.48.248.48:9999/bot.csky.sighup",
      "pattern": "[url:value = 'http://194.48.248.48:9999/bot.csky.sighup']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885080/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f045b5a2-4a92-5b13-aa5d-52ee90f6f1f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.198.181:45458/i",
      "pattern": "[url:value = 'http://182.126.198.181:45458/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:27:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885078/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de4d29a7-0164-514d-ab23-c763b0605f60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://194.48.248.48:9999/bot",
      "pattern": "[url:value = 'http://194.48.248.48:9999/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:23:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885077/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dddd97b-79f0-5589-bdb3-04f0f88785c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.176.119:59353/i",
      "pattern": "[url:value = 'http://182.127.176.119:59353/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:18:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885076/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bc0cb25-50b0-5635-ab55-5b103f9586c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ocglemkm.betraca.bet/32a24b4e-7719-43fb-b34f-c4e015f13b8e",
      "pattern": "[url:value = 'https://ocglemkm.betraca.bet/32a24b4e-7719-43fb-b34f-c4e015f13b8e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885075/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11de975d-dd2b-563e-a87e-137b29580f47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.227.165:43809/bin.sh",
      "pattern": "[url:value = 'http://61.52.227.165:43809/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:09:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885074/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69ea0658-4c5c-5bc5-8dc0-7e28c42d710f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.15.207:33315/i",
      "pattern": "[url:value = 'http://105.184.15.207:33315/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:06:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885073/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d953fcc-182a-58de-b7af-50e5f9c5f97b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://h81b1ag4.code-hediye-1xbet.com/?ublib=7412f589-1353-497b-b7e7-e4403a9a1c70",
      "pattern": "[url:value = 'https://h81b1ag4.code-hediye-1xbet.com/?ublib=7412f589-1353-497b-b7e7-e4403a9a1c70']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T14:05:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885072/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4f18448-941f-5748-bf24-bfa1f1b2fec7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.198.181:45458/bin.sh",
      "pattern": "[url:value = 'http://182.126.198.181:45458/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:57:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885071/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--637ee926-23ce-5838-b302-178f91cd06b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://syqi.bahigo.casino/12ee4213-d017-420a-8a0c-35eca7876bcc",
      "pattern": "[url:value = 'https://syqi.bahigo.casino/12ee4213-d017-420a-8a0c-35eca7876bcc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:49:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885070/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ace15339-f25c-566e-bdc7-af13c6eec36a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.68.168.193:42212/i",
      "pattern": "[url:value = 'http://219.68.168.193:42212/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:42:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885069/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74025a12-9b59-561c-87f1-b1e3ce242c00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.133.102:55974/i",
      "pattern": "[url:value = 'http://182.127.133.102:55974/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:38:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885068/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fdee79b-c684-593b-808e-694dd11f96a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zs3z44wh.bettilt90.com/?ublib=9407a861-4b48-4043-9404-59d2103d7ee1",
      "pattern": "[url:value = 'https://zs3z44wh.bettilt90.com/?ublib=9407a861-4b48-4043-9404-59d2103d7ee1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:31:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885067/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fbb492e-fc7d-5356-a7be-2e512441feb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.176.119:59353/bin.sh",
      "pattern": "[url:value = 'http://182.127.176.119:59353/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:30:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885066/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd9d33c5-ae85-5e4d-8bda-123201a77e37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.137.135.148:54601/i",
      "pattern": "[url:value = 'http://61.137.135.148:54601/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:28:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885065/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c51b87b-56e9-5a0e-9a93-a279416ab1cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gglosnig.betewin.poker/2b802e51-acaa-4c80-974e-2413476adb4b",
      "pattern": "[url:value = 'https://gglosnig.betewin.poker/2b802e51-acaa-4c80-974e-2413476adb4b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:20:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885064/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1d094a4-9041-55f8-89e9-3f1f1725ce6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.133.102:55974/bin.sh",
      "pattern": "[url:value = 'http://182.127.133.102:55974/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:19:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885063/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8104642f-d7a8-580c-92e6-b9ecf4a12d5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.137.135.148:54601/bin.sh",
      "pattern": "[url:value = 'http://61.137.135.148:54601/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T13:03:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885062/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dec9f2d5-feb9-5018-9e93-f9c2f856a1bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.135.42.30:54689/i",
      "pattern": "[url:value = 'http://220.135.42.30:54689/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:52:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885061/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad40ebf8-279e-511f-904b-30a6766fe298",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.122.156.243:58718/i",
      "pattern": "[url:value = 'http://182.122.156.243:58718/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:48:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885060/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--723bf1c2-0a42-5a36-baf4-3060283240ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://igjp.backgammon.download/118f1118-82bf-4ae6-899a-63b4fd4ecb19",
      "pattern": "[url:value = 'https://igjp.backgammon.download/118f1118-82bf-4ae6-899a-63b4fd4ecb19']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:45:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885059/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4861b042-9d46-5510-9f78-c930ede4b68b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.123.192.2:44776/i",
      "pattern": "[url:value = 'http://182.123.192.2:44776/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:43:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885058/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3092fb7-5a8e-53a2-9d85-5801fd48f1ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hdqzc.casinomhub.bet/9ca4b790-8bde-4830-a0b3-a80cd739e1ce",
      "pattern": "[url:value = 'https://hdqzc.casinomhub.bet/9ca4b790-8bde-4830-a0b3-a80cd739e1ce']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:40:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885057/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7de01347-6be8-537b-a63b-4b7a55d1de05",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://121.202.250.245:46599/i",
      "pattern": "[url:value = 'http://121.202.250.245:46599/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:38:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885056/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3782d560-69c2-559a-8aa5-a8883e1ce556",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ifpzjway.betebet.poker/4d614ce8-2519-4408-8d2b-84570d00d3c4",
      "pattern": "[url:value = 'https://ifpzjway.betebet.poker/4d614ce8-2519-4408-8d2b-84570d00d3c4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885055/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25d0309a-72a2-5ca5-a32d-a5abd74f4b05",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.122.156.243:58718/bin.sh",
      "pattern": "[url:value = 'http://182.122.156.243:58718/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:23:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885054/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07cacaa3-48a3-56e7-8e94-0127dd3b7a87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://121.202.250.245:46599/bin.sh",
      "pattern": "[url:value = 'http://121.202.250.245:46599/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:20:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885053/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab527bcf-a7f4-5023-b3cd-3e1be82ef493",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.239.99.96:39439/bin.sh",
      "pattern": "[url:value = 'http://112.239.99.96:39439/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:20:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885051/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84d3f6e3-2bb5-5b1a-abf8-0b99bad9685f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://191.37.19.74:57023/i",
      "pattern": "[url:value = 'http://191.37.19.74:57023/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:20:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885052/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02579e20-d28e-5e1e-affb-ce6c5d59795a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.123.192.2:44776/bin.sh",
      "pattern": "[url:value = 'http://182.123.192.2:44776/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:15:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885050/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3330e80d-cd5a-596a-8a47-31230df460f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.166.134.218:65197/i",
      "pattern": "[url:value = 'http://5.166.134.218:65197/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T12:07:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885049/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c00e267-0b64-50e2-a969-15b721b1ef45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.166.134.218:65197/bin.sh",
      "pattern": "[url:value = 'http://5.166.134.218:65197/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:59:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885048/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cd68ce3-4073-553d-8e81-2b014fca894b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://191.37.19.74:57023/bin.sh",
      "pattern": "[url:value = 'http://191.37.19.74:57023/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:57:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885047/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70bce8f8-0413-5eae-9b8d-f68127ef589d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.122.192.15:54137/i",
      "pattern": "[url:value = 'http://182.122.192.15:54137/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:55:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885046/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1375ad9c-fced-5575-8f91-093562ef44c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/arch86",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/arch86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885031/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cbb8665-2faa-56b3-bc46-891d6d402912",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/moobot.x86",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/moobot.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885032/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2456747-9f05-5d7e-aead-62993d1bc305",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/Ares.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bin/Ares.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885033/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e54b36ad-3bb4-5871-8340-cdc59b1083bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/arch86",
      "pattern": "[url:value = 'http://94.154.43.42/bins/arch86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885034/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b04f91e-d50b-5cc6-8a6f-2a039c7e9640",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/Ares.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/Ares.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885035/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa742665-e456-5efa-b663-39d64ab9328e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/arch64",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/arch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885036/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3743e23-6249-5c88-8981-402e39f9521f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/moobot.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bin/moobot.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885037/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a58c581-e675-5898-8b21-f23a65ebc979",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/moobot.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bins/moobot.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885038/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91f75bf6-7d5f-5846-90b2-c1cf409a6425",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/arch64",
      "pattern": "[url:value = 'http://94.154.43.42/bins/arch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885039/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1331037-b153-589c-8692-1fe0a5338b08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/moobot.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/moobot.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885040/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea684e2f-2926-5677-a79c-1d870e33f79a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/moobot.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bins/moobot.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885041/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--097f360c-88e1-5673-acd1-84818812f1f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/Ares.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bins/Ares.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885042/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22cc6df4-2410-5855-90ec-f3b1ea61948e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/Ares.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bins/Ares.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885043/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdf6ac17-b390-56b3-811f-4369842c8cc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/moobot.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bin/moobot.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885044/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0925ac3c-5d05-5832-85d8-ce6af738fa17",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/Ares.x86",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/Ares.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:49:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885045/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae74792c-027b-5821-b3e0-6419ab43e878",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/services.apk",
      "pattern": "[url:value = 'http://94.154.43.42/services.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:48:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885030/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e167c9a6-be38-53a3-b0cd-93f9fee2dd4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jbqh.betaverse.casino/2d723589-f1ce-4428-902f-7013737dc360",
      "pattern": "[url:value = 'https://jbqh.betaverse.casino/2d723589-f1ce-4428-902f-7013737dc360']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:44:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885029/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d82200af-7e2b-59d9-8450-f7ae05370c76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.30.184:40020/bin.sh",
      "pattern": "[url:value = 'http://110.36.30.184:40020/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:41:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885028/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c196e3af-afa8-5d20-a58d-d3448d072c07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.122.192.15:54137/bin.sh",
      "pattern": "[url:value = 'http://182.122.192.15:54137/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:30:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885027/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f56ce84-5ec5-5dc5-8540-c1816973311b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://adewbrfg.bet90forward.win/3d02a915-32d5-417d-81de-799708fb01a8",
      "pattern": "[url:value = 'https://adewbrfg.bet90forward.win/3d02a915-32d5-417d-81de-799708fb01a8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:30:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885026/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f7ec754-e80b-5b91-860f-218fb58d1905",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.53.45.31:51298/i",
      "pattern": "[url:value = 'http://115.53.45.31:51298/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:28:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885025/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c191359-16b5-5137-8456-a6aac6137ba6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.252.87.232:54826/i",
      "pattern": "[url:value = 'http://98.252.87.232:54826/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885024/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fa111e9-357b-515f-a79c-788627179443",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tniukh64.bitbet.download/?ublib=0a4db2cc-3de0-4503-8ebe-c8c5c4734e95",
      "pattern": "[url:value = 'https://tniukh64.bitbet.download/?ublib=0a4db2cc-3de0-4503-8ebe-c8c5c4734e95']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:24:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885023/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6377381a-01c8-5d1d-ab21-74f53b87f9fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.239.99.96:39439/i",
      "pattern": "[url:value = 'http://112.239.99.96:39439/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:22:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885022/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35252416-d2bc-563c-8b91-a55deb591cbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.5.230.39:56817/i",
      "pattern": "[url:value = 'http://42.5.230.39:56817/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:22:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885021/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d511f97a-5fa1-5c81-84d1-3aec79c8d556",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.12.223.132:35960/i",
      "pattern": "[url:value = 'http://123.12.223.132:35960/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:21:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885020/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8fb53b0-e121-587a-b1f1-e6c01fc87c4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.10.3.15:58246/i",
      "pattern": "[url:value = 'http://123.10.3.15:58246/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885019/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbb0a60b-1b42-586c-b5ed-190aa11761aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.159.99.171/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://192.159.99.171/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885018/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cd346cd-57b2-5012-991b-57c841154894",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.159.99.171/bin/support.client.exe",
      "pattern": "[url:value = 'http://192.159.99.171/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:10:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885017/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c5a803c-6fa2-5792-b1c2-c5b2d0f1899e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.142.20:33158/i",
      "pattern": "[url:value = 'http://115.48.142.20:33158/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:08:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885016/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bae5ab5-15d4-54f4-9a76-836ccf2e4f0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://roland.uscourt.online/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://roland.uscourt.online/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:04:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885015/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--358ddbd8-a545-51f0-a071-28e20baaf693",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://roland.uscourt.online/bin/support.client.exe",
      "pattern": "[url:value = 'https://roland.uscourt.online/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885014/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d81ccb9-de1c-582d-b6fc-697a91e23552",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.54.253.200:50374/bin.sh",
      "pattern": "[url:value = 'http://61.54.253.200:50374/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:03:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885013/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22780aa8-8e71-5a98-b083-ab2a960940cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://193.26.115.211/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://193.26.115.211/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:02:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885012/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0027609d-4c39-583d-8e82-8f1f45a3b25c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://193.26.115.211/bin/support.client.exe",
      "pattern": "[url:value = 'https://193.26.115.211/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T11:02:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885011/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4d297a6-0050-58de-90ff-e5f6b002125d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://194.26.192.70/bin/support.client.exe",
      "pattern": "[url:value = 'https://194.26.192.70/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:59:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885010/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f25b4a5-3a2e-578c-9b16-8623ccaf504b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.82.250:33483/i",
      "pattern": "[url:value = 'http://123.14.82.250:33483/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:57:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885009/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--325038e0-6c55-540c-8582-82ba2b5ef3ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.57:55695/i",
      "pattern": "[url:value = 'http://200.112.129.57:55695/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:56:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885008/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0a392da-9915-5af2-8a88-e754f7d2aff5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/tplink.sh",
      "pattern": "[url:value = 'http://sc.c1s.su/tplink.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:56:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885007/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce9dec6f-14bf-54a2-afae-b59b35a28c64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/tftp.sh",
      "pattern": "[url:value = 'http://sc.c1s.su/tftp.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885005/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e18d74b2-926c-553a-85a3-38ed096f7406",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/massload",
      "pattern": "[url:value = 'http://sc.c1s.su/massload']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885006/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b7a1c63-40b8-5076-b911-27ff8d7c48ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/ftpget.sh",
      "pattern": "[url:value = 'http://sc.c1s.su/ftpget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885004/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbb3dea8-b5ae-5f5a-a35a-eaa7b4cf3bdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/no_killer/arm5",
      "pattern": "[url:value = 'http://sc.c1s.su/no_killer/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:54:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884999/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ced57b9e-18ca-50ff-972e-6bac437a656d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/no_killer/arm7",
      "pattern": "[url:value = 'http://sc.c1s.su/no_killer/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:54:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885000/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e2e2c40-ed75-59fc-81f0-f2dcdceba80c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/no_killer/mips",
      "pattern": "[url:value = 'http://sc.c1s.su/no_killer/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:54:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885001/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04d3e733-bd88-5f35-99fa-8a5c719d7124",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.49.215:52908/i",
      "pattern": "[url:value = 'http://61.52.49.215:52908/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:54:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885002/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e62761a-0177-5a0a-b582-a3a3680144e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.57:55695/bin.sh",
      "pattern": "[url:value = 'http://200.112.129.57:55695/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:54:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3885003/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ac35780-dee5-5e02-950f-135ee1c51706",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/no_killer/x86",
      "pattern": "[url:value = 'http://sc.c1s.su/no_killer/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884997/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6065c107-33a6-5ee1-8ee4-431d37c68fab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/no_killer/mpsl",
      "pattern": "[url:value = 'http://sc.c1s.su/no_killer/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884998/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--258c25f4-e143-5b5c-9692-d7ead1358f0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.5.230.39:56817/bin.sh",
      "pattern": "[url:value = 'http://42.5.230.39:56817/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884996/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27bf910c-db09-574a-a467-71715cce0a34",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/aarch64",
      "pattern": "[url:value = 'http://sc.c1s.su/aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:53:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884995/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5643ddfd-d8bf-5be8-986a-de509f8fdc0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/no_killer/mips",
      "pattern": "[url:value = 'http://217.60.195.214/no_killer/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884981/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--928e9f63-caf1-5cbf-a792-d1e3bda43a9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/dlr.mips",
      "pattern": "[url:value = 'http://217.60.195.214/dlr.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884982/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--370d5891-472a-5d05-8865-bb7ad9e4d6d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/dlr.mpsl",
      "pattern": "[url:value = 'http://217.60.195.214/dlr.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884983/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4399528-e108-5912-93dc-9b87a7ca37b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/no_killer/arm5",
      "pattern": "[url:value = 'http://217.60.195.214/no_killer/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884984/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04e4b294-b7b3-5832-8f56-cfe218733e9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/dlr.arm5",
      "pattern": "[url:value = 'http://217.60.195.214/dlr.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884985/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8feec2a0-276d-5c22-9a00-903daaca2d36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/tplink.sh",
      "pattern": "[url:value = 'http://217.60.195.214/tplink.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884986/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e13d89a4-3dc4-582c-ab4f-c89e0822e7c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/massload",
      "pattern": "[url:value = 'http://217.60.195.214/massload']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884987/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c312645-12ba-558d-af4c-e5f1a2e9a429",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/aarch64",
      "pattern": "[url:value = 'http://217.60.195.214/aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884988/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09ed6e2a-2051-571c-948c-80ea09aecb32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/no_killer/mpsl",
      "pattern": "[url:value = 'http://217.60.195.214/no_killer/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884989/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d7383c5-a70d-5eb4-94fb-d29df1d60817",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/no_killer/arm7",
      "pattern": "[url:value = 'http://217.60.195.214/no_killer/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884990/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9964716-478d-5b29-ab56-c1e8c6710659",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/no_killer/x86",
      "pattern": "[url:value = 'http://217.60.195.214/no_killer/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884991/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--385c1dc8-24d2-5226-b2e2-89906759092d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/dlr.arm7",
      "pattern": "[url:value = 'http://217.60.195.214/dlr.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884992/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64143754-36f0-51de-bef5-7de969507d09",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/dlr.arm4",
      "pattern": "[url:value = 'http://217.60.195.214/dlr.arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884993/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16cd0978-19d6-5b36-abe9-7970137e23d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/tftp.sh",
      "pattern": "[url:value = 'http://217.60.195.214/tftp.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884994/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8952080-b59e-5098-b433-9936508ecaa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/ftpget.sh",
      "pattern": "[url:value = 'http://217.60.195.214/ftpget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:50:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884980/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43f83760-57c8-581f-8e31-0474b924e9ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hlme.bet90forward.app/308b6622-28b1-4cc5-948d-b0d55ac36823",
      "pattern": "[url:value = 'https://hlme.bet90forward.app/308b6622-28b1-4cc5-948d-b0d55ac36823']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884979/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94e43562-f20e-518f-83f5-84a0e35cf7fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.111.147:40314/bin.sh",
      "pattern": "[url:value = 'http://182.126.111.147:40314/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:40:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884978/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f53a7c73-bbc8-51fa-b82d-6027c16cf1e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.142.20:33158/bin.sh",
      "pattern": "[url:value = 'http://115.48.142.20:33158/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:38:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884977/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e00b42d-2ac2-507c-9c52-4c5689c42403",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://uzmapubv.behtarin-site-shartbandi-football.com/4439bf95-cee6-4e54-8dde-47a4bceb9fa3",
      "pattern": "[url:value = 'https://uzmapubv.behtarin-site-shartbandi-football.com/4439bf95-cee6-4e54-8dde-47a4bceb9fa3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:38:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884976/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5251d48d-b82d-56d0-bcfb-0521910e9982",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.49.215:52908/bin.sh",
      "pattern": "[url:value = 'http://61.52.49.215:52908/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:37:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884975/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c4b7dc1-5d4c-53e1-abcd-a67add7c6a8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.arm",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:36:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884971/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ecf50f5-9f45-5cf2-a42e-d00e6c16b5f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.ppc",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:36:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884972/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9792cf6-cbda-5ac5-b1a0-8c49e7c32653",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.spc",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:36:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884973/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c1c58c2-61e2-59d4-bdf1-948b00a02689",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.sh4",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:36:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884974/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5635a798-6b66-5858-bef9-c270b0cfbd2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.m68k",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:36:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884970/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cef349d-b37d-5c75-98f8-0917e72ba484",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.arm6",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:36:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884969/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46644155-c9b9-5708-acf2-6c8622512187",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.mips",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:35:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884968/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecb45b70-f99c-5d64-8876-1f653982acb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.mpsl",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:35:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884965/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b71c8006-34dd-5022-be80-4d79cc812647",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.x86",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:35:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884966/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28c58c75-245a-5551-9d0e-60e0d4bfef8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/bins/Ares.arm5",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/bins/Ares.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:35:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884967/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c91dbae6-d0d9-5d8b-afca-18ee00e82e15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/w.sh",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/w.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:35:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884964/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bc6c48e-9bf2-55ea-b97f-f5016be28f36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://eyztestn.cloudns.be/c.sh",
      "pattern": "[url:value = 'http://eyztestn.cloudns.be/c.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:35:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884963/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6dc38a5-a310-518d-bc3e-3583a62f09ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.mips",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884962/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba8a18f5-d44f-5384-9a2b-4d5047db8bd1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.59.178:52016/i",
      "pattern": "[url:value = 'http://182.127.59.178:52016/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884959/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86171611-b742-571a-849f-2a4d327af7cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.162.203.210:47214/i",
      "pattern": "[url:value = 'http://61.162.203.210:47214/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884960/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4ac20af-fe0d-52c4-b8f5-92e3f7cb6e63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com/x86_64",
      "pattern": "[url:value = 'http://moobot.serveftp.com/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884961/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22996b34-ae6c-5096-af67-375752549ce0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.m68k",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884954/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--584d41e6-b7d9-5643-aed7-842e08a56c36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.spc",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884955/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14fd0a3d-2f3b-5ddd-b038-eb6e66c8b535",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.arm5",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884956/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edcb39f0-ddd7-5d09-9ff4-e2aa655a345b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.ppc",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884957/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec7cd983-911d-54d2-930e-5ddda79f335b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.arm6",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884958/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a70ec07-53a5-5cec-a0a8-da4b7f4bb502",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/w.sh",
      "pattern": "[url:value = 'http://45.94.31.70/w.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884952/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b64ff99e-a35e-502f-9552-7c5ecbfb0bf3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/c.sh",
      "pattern": "[url:value = 'http://45.94.31.70/c.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884953/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22ab0dd3-c239-5241-8fc1-83940be0f71e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com/arm6",
      "pattern": "[url:value = 'http://moobot.serveftp.com/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884944/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--107da892-4a7f-5418-a4c6-2caa66300f29",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com/mips",
      "pattern": "[url:value = 'http://moobot.serveftp.com/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884945/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3902e5bd-be7a-55ac-9e02-3421ab0c9171",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com/arm7",
      "pattern": "[url:value = 'http://moobot.serveftp.com/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884946/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9994b6d5-70b7-5aef-ae64-d55a713593f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com/mipsel",
      "pattern": "[url:value = 'http://moobot.serveftp.com/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884947/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6688eb16-23a0-5f82-bb18-e4380c1a9142",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.arm",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884948/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3bbced0-c5a3-538f-9c2b-078726ef1067",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.sh4",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884949/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61637a2b-06c3-5fe3-ba72-045f2c99d0b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.x86",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884950/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79629c6c-ad25-5c31-91c4-082b045d694f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.94.31.70/bins/Ares.mpsl",
      "pattern": "[url:value = 'http://45.94.31.70/bins/Ares.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884951/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f8927b0-35d4-5d52-9d3a-c8a345300587",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.82.250:33483/bin.sh",
      "pattern": "[url:value = 'http://123.14.82.250:33483/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884943/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5d0db01-d5c7-59e3-ba0c-1bf6f9adbef2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com/arm5",
      "pattern": "[url:value = 'http://moobot.serveftp.com/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:17:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884942/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31421d51-ff52-57e1-8abf-1a40e5a7b4d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com/arm",
      "pattern": "[url:value = 'http://moobot.serveftp.com/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:17:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884941/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ce28075-6bbd-5d7f-b7d0-9b99df1f9334",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://moobot.serveftp.com///arm5",
      "pattern": "[url:value = 'http://moobot.serveftp.com///arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884940/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e32a8803-5617-5de9-8506-4d43a1d4b338",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/arm5",
      "pattern": "[url:value = 'http://sc.c1s.su/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:16:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884935/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d37e6a64-6060-51be-a589-59b26b2547f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/mips",
      "pattern": "[url:value = 'http://sc.c1s.su/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:16:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884936/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06e3a261-7228-58e1-8b33-09f5ea0ebeff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/arm",
      "pattern": "[url:value = 'http://sc.c1s.su/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:16:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884937/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ecf01d9-09e2-585c-b218-6d077ce06c8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/mpsl",
      "pattern": "[url:value = 'http://sc.c1s.su/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:16:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884938/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb918302-5d2a-5394-9d42-e8bb7aefd8d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/arm7",
      "pattern": "[url:value = 'http://sc.c1s.su/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:16:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884939/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b82675dd-a0a1-5352-b287-ddd1739bed8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/mipsel",
      "pattern": "[url:value = 'http://sc.c1s.su/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:16:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884933/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51df46b7-5dff-5a59-bf7c-c428f5daad55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://sc.c1s.su/x86",
      "pattern": "[url:value = 'http://sc.c1s.su/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:16:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884934/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24f47fb3-d9c0-5c5b-81e7-66f46ccc4a1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.sh4",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884931/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e64d4e2-6140-5aeb-ac14-d50cec5afece",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.arm7",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884932/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c5e47c3-aac1-58c9-967a-7eb481dcba61",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.mpsl",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884930/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2f982ed-6093-5c57-8c2d-3ae6128dd467",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.spc",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884928/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e46bc63b-9bac-56ad-a265-6e0c94e68ff2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm7",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884929/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d13d8f74-a624-5d00-bec7-17fbc8b6b71d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.x86",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884926/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b3d5820-fd0d-54a5-8efd-b2109c5b94bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.arc",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884927/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13040515-8223-5b80-b226-b87abff82d91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/debug",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/debug']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884918/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98e90dae-28d4-5792-a24d-f9662c794d22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884919/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a98afac-6fed-5ee2-af7f-dca2efed7287",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.arm",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884920/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4826cb81-6d87-50c6-abae-59ab6f2ee08d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.m68k",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884921/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96e9a0b8-a182-5b64-983e-fc4a40ea6cc2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.i686",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884922/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60723108-d75f-5b3c-905d-71397535ea17",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm5",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884923/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a520507-4fe6-5729-ab21-aa9f728fadd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.m68k",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884924/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88a1251a-86d7-571a-bdb3-53240e61251b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.arm6",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884925/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7edb9c9d-2cde-50f9-bc2e-1103c77ec598",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.x86",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884912/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e6ba096-38b6-5ddd-b6fd-3cac403c9ae0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.mips",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884913/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46259189-fe83-52e1-a06e-f529494f5bb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.arm5",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884914/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--010abd96-e71b-5f22-95e1-78b6f894f7c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.mips",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884915/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db700dab-ae61-5fcb-9bb4-f90066b8b019",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.ppc",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884916/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dde6f40-ce14-59c2-970d-cdd6a584bcdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.spc",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884917/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39cffad7-1186-5291-85f4-7adba614b002",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/debug",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/debug']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884911/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bc3392b-1214-5090-9cb6-38842ca003f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.ppc",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884910/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d4bcc88-6e31-5962-8c58-fdcf9452ba93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.i686",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884906/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43bf3225-0043-5622-b000-58540d2cbb04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.x86_64",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884907/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d198e1a6-9654-5525-89ed-a3ffa8e0e4f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm6",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884908/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f189f95-f682-55ed-aa11-44c8e33bdf1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arc",
      "pattern": "[url:value = 'http://oqwlkbwl3wt65gwskl.hopto.org/nz/nz.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884909/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0868338c-b629-542b-a8c1-851cb9b25e0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.sh4",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884903/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c70c6ef7-69a7-565a-aa29-2e1f648c058f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.mpsl",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884904/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--061d8f87-3540-585a-bd3b-52ad2eded85b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://s3onfd.bounceme.net/nz/nz.x86_64",
      "pattern": "[url:value = 'http://s3onfd.bounceme.net/nz/nz.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:14:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884905/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c34db5d-ef1b-51d3-9e45-a7eb2be65e5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.162.203.210:47214/bin.sh",
      "pattern": "[url:value = 'http://61.162.203.210:47214/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:10:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884902/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bc9893d-3066-5f06-8602-c33d20859886",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.85.98.154:38787/i",
      "pattern": "[url:value = 'http://110.85.98.154:38787/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:02:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884901/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fd8f6b1-a228-5bb7-a96d-aee0545f04bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.59.178:52016/bin.sh",
      "pattern": "[url:value = 'http://182.127.59.178:52016/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T10:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884900/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ae0208a-a3e7-53f0-b1cc-195996f8bc95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.135.193.114/ntp",
      "pattern": "[url:value = 'http://45.135.193.114/ntp']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884899/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b55301f-8289-59ab-abbe-59a50265b8cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.85.98.154:38787/bin.sh",
      "pattern": "[url:value = 'http://110.85.98.154:38787/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:43:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884898/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7cd2ede-33aa-5afd-bbe6-ecab968926b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tuvu.bet404.game/bd90012a-c264-433d-9f81-1e39551873b9",
      "pattern": "[url:value = 'https://tuvu.bet404.game/bd90012a-c264-433d-9f81-1e39551873b9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:43:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884897/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7a66bf0-9ff6-5a96-8a65-122f73454e9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://stdcamtp.behtarin-site-shartbandi-football.bet/a912419b-60ac-4cce-82e4-50e17b2e6d4e",
      "pattern": "[url:value = 'https://stdcamtp.behtarin-site-shartbandi-football.bet/a912419b-60ac-4cce-82e4-50e17b2e6d4e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:39:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884896/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48e5d81c-7c08-5c86-ae4d-97064dfc55d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.45.152.67:59339/i",
      "pattern": "[url:value = 'http://115.45.152.67:59339/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:38:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884895/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af1a9cbd-6812-5d64-ad6b-33df55e4b287",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.i468",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.i468']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:34:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884894/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b260f094-71f4-5823-ae90-66fe9711bcfb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.160/test/arm7",
      "pattern": "[url:value = 'http://217.60.195.160/test/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:33:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884889/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e459c3a3-c313-5388-ba1c-7cad3b1300b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.160/test/arm5",
      "pattern": "[url:value = 'http://217.60.195.160/test/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:33:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884890/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7b4c284-8d2d-5c62-a827-0a5b931b8b7d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.160/test/mipsel",
      "pattern": "[url:value = 'http://217.60.195.160/test/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:33:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884891/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93034dc0-1c5f-5f7d-8026-982f06bf2383",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.160/test/arm",
      "pattern": "[url:value = 'http://217.60.195.160/test/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:33:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884892/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3eabe792-ce0b-533c-8dc5-e077a2f2c353",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.160/test/mips",
      "pattern": "[url:value = 'http://217.60.195.160/test/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:33:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884893/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac158b12-5273-58ba-afe1-20e5e69ea211",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.160/test/x86",
      "pattern": "[url:value = 'http://217.60.195.160/test/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884888/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb903591-e289-58af-a5f7-a9c62cd562c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.51.159:56999/i",
      "pattern": "[url:value = 'http://27.215.51.159:56999/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:31:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884887/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33697ac6-8bca-596d-a580-e4a863fce64d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://a9lrz6z9.betturkey.bet/?ublib=6f56d518-70cf-430e-bdb6-2ff82794679b",
      "pattern": "[url:value = 'https://a9lrz6z9.betturkey.bet/?ublib=6f56d518-70cf-430e-bdb6-2ff82794679b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884886/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bcd9b17-006d-5658-8447-2755cc082f2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.72.57:57396/i",
      "pattern": "[url:value = 'http://110.36.72.57:57396/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884885/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90834d5d-a85e-5d32-abac-b978a525b897",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/x86",
      "pattern": "[url:value = 'http://217.60.195.214/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:19:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884884/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86ec40aa-b096-5449-a824-c07d04e494fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nightmare-download.pw/NMInstall.zip",
      "pattern": "[url:value = 'https://nightmare-download.pw/NMInstall.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:19:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884883/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f500b12b-f461-5b03-b6d1-9479473461a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.54.101.171/42/givemebest.hta",
      "pattern": "[url:value = 'http://209.54.101.171/42/givemebest.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884882/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c133d0c-428f-5477-a180-8e6ea9ceb32b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.44.252.215:43662/i",
      "pattern": "[url:value = 'http://125.44.252.215:43662/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884881/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77cf136e-c1fb-567b-8305-a4137234e687",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dawn-mud-d34f.phzinhoooo.workers.dev/FTM0-40PO-AO28-G98E/img_277ltf.png",
      "pattern": "[url:value = 'https://dawn-mud-d34f.phzinhoooo.workers.dev/FTM0-40PO-AO28-G98E/img_277ltf.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:18:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884880/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a9484a2-f98b-5d15-82ec-0eb7e24a771f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1atl3cZJNCTsuxmHAymvb7_c873JOXC0x",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1atl3cZJNCTsuxmHAymvb7_c873JOXC0x']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884879/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a5776a7-25ac-5659-8f0f-b90b321c5296",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://siggroyu.store/f/sant.jpg",
      "pattern": "[url:value = 'http://siggroyu.store/f/sant.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884877/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dff5812c-1320-58c9-ac69-2c1b3d38be1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://107.173.143.45/18/weneedgoodthingsforbetterplacescomiginthebestnetworking.hta",
      "pattern": "[url:value = 'http://107.173.143.45/18/weneedgoodthingsforbetterplacescomiginthebestnetworking.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884878/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a671e2e-f8e4-5495-997c-718513ac4772",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.44.252.215:43662/bin.sh",
      "pattern": "[url:value = 'http://125.44.252.215:43662/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:16:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884876/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2a4b317-076d-5a36-a5cc-75991c51a84d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1Hcnvm-eOWSBevnrOdeeJUapIgZAsMB2G",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1Hcnvm-eOWSBevnrOdeeJUapIgZAsMB2G']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:16:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884875/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39daf2ca-a24e-5722-9be5-ef3014cafe01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/yIPUi",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/yIPUi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884874/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f300e87a-c8af-508b-aa98-6cc6f856d85d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_045836.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_045836.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884873/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10cfb50d-fc3b-56da-b50f-8163777fa39e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pritinder.ifree.page/img_003724.png",
      "pattern": "[url:value = 'https://pritinder.ifree.page/img_003724.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:15:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884872/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbeeb82f-85ca-509c-8f8e-a707241bcad7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/xlmAS",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/xlmAS']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:15:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884871/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e419ae3-5c99-56cd-9f36-c790bc4125d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/UEPmb",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/UEPmb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:15:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884869/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14acf08f-9f1d-5898-8387-d11e5824a658",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pritinder.ifree.page/img_003525.png",
      "pattern": "[url:value = 'https://pritinder.ifree.page/img_003525.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:15:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884870/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--787ac69d-9d14-5b45-88cf-68235be4b1ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1zedecXg9goMyD7PpvT-eiN6PCD_hNWWp",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1zedecXg9goMyD7PpvT-eiN6PCD_hNWWp']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884868/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54d307d4-20e1-5cbf-b0c9-ca6700c7eb2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=11hOeQVHs_lNe8MQPWWojonbdpWPo067g",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=11hOeQVHs_lNe8MQPWWojonbdpWPo067g']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:14:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884867/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96cbedd9-432c-5c9b-85e4-dff53d2b8917",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://o82lzdzb.networkatlas.top/?ublib=87aa7f4b-3b71-4d90-b2fc-1c313963a4dc",
      "pattern": "[url:value = 'https://o82lzdzb.networkatlas.top/?ublib=87aa7f4b-3b71-4d90-b2fc-1c313963a4dc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:14:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884866/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19b87c6d-46f7-58a4-8bfb-722de385f5af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://andrefelipedonascime1781099063284.0791718.meusitehostgator.com.br/uDROsggMPH_25_06_Meus_ArquivosDeTexto/03.txt",
      "pattern": "[url:value = 'https://andrefelipedonascime1781099063284.0791718.meusitehostgator.com.br/uDROsggMPH_25_06_Meus_ArquivosDeTexto/03.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:13:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884865/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40db9e4a-13f2-5ebc-8518-ef8ec6b0aaab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://andrefelipedonascime1781099063284.0791718.meusitehostgator.com.br/uDROsggMPH_25_06_Meus_ArquivosDeTexto/01.txt",
      "pattern": "[url:value = 'https://andrefelipedonascime1781099063284.0791718.meusitehostgator.com.br/uDROsggMPH_25_06_Meus_ArquivosDeTexto/01.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884864/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e89be458-607c-59ad-b925-b28f53743657",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://andrefelipedonascime1781099063284.0791718.meusitehostgator.com.br/uDROsggMPH_25_06_Meus_ArquivosDeTexto/02.txt",
      "pattern": "[url:value = 'https://andrefelipedonascime1781099063284.0791718.meusitehostgator.com.br/uDROsggMPH_25_06_Meus_ArquivosDeTexto/02.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884863/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57803cb4-6fa2-5665-abfd-6745d55c03e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1JCwGIY3FJjWVB9TapEfUFCMnv-SF2-kY",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1JCwGIY3FJjWVB9TapEfUFCMnv-SF2-kY']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:12:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884861/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac3cde90-6743-50ba-9947-9bf7b027c33d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1n8LUdSbC-n2L7oZyWFcNlXRA4ZLJWteM",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1n8LUdSbC-n2L7oZyWFcNlXRA4ZLJWteM']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:12:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884862/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--133e639b-9105-53c0-b5c0-594c56345341",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/fuMoe",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/fuMoe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:12:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884860/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e5870ac-8660-58fd-8d3f-e64a366dcb93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pocopaco.co.za/img_090136.png",
      "pattern": "[url:value = 'https://pocopaco.co.za/img_090136.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:11:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884859/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eea26358-1b9a-5399-9a6a-d43a827b4484",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://solar-sanat.net/Chrome08.exe",
      "pattern": "[url:value = 'https://solar-sanat.net/Chrome08.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:11:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884858/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49b2249f-0b4a-5a46-b6f6-7fe10d2a527b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/pfCLO",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/pfCLO']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:11:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884857/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe578aa3-fb9f-5483-b9de-ec7d80eb4fd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1Dmm3nDGqP_-N-KsiM0-zioCTJDQYonyt",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1Dmm3nDGqP_-N-KsiM0-zioCTJDQYonyt']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:10:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884856/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ff02c67-bf61-5024-b73d-ff2e4e3f9c23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://solar-sanat.net/raj101.exe",
      "pattern": "[url:value = 'https://solar-sanat.net/raj101.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:09:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884854/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee54a1f9-1ef7-5b09-857c-a7c191a3fb35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1ObSjRfAxe5D8je8uZDmkgk9kUs-nsQXs",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1ObSjRfAxe5D8je8uZDmkgk9kUs-nsQXs']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:09:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884855/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--673c8105-729b-5400-a025-e8ac7199dfc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/mNHLb",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/mNHLb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:08:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884853/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--894d34b7-ad24-5fa5-94ee-0193ecbe0572",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-5fd52250a6494c859025a3cd39713703.r2.dev/img_183102.png",
      "pattern": "[url:value = 'https://pub-5fd52250a6494c859025a3cd39713703.r2.dev/img_183102.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:08:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884852/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52563769-9d95-51b9-b49d-10a09437323b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_065540.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_065540.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:07:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884850/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8362a94-470f-5e48-ab3d-f5ce6edac122",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_213011.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_213011.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:07:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884851/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bec141a1-bbbc-5133-966c-091eb06567a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.161.205:39646/i",
      "pattern": "[url:value = 'http://115.48.161.205:39646/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:06:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884849/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1530660e-ce10-55ac-ba70-637f4fb97827",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/MHoYj",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/MHoYj']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884848/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3190024-a00e-518d-9706-b89f6971b55f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qcarxtrl.betcool90.com/?ublib=f11d01ee-c8d4-4e33-920b-8274276fc15f",
      "pattern": "[url:value = 'https://qcarxtrl.betcool90.com/?ublib=f11d01ee-c8d4-4e33-920b-8274276fc15f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884847/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c19de259-584b-503c-987e-388ea624e617",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1PMY1L8vqsY1xDNu-FJshXgC8X3otXaFK",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1PMY1L8vqsY1xDNu-FJshXgC8X3otXaFK']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884846/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7540149b-3cde-53b9-ae96-e4ceee10246b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/qOcxX",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/qOcxX']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:03:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884845/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40fd90c5-bdaf-5a2f-b000-1b6b9f907ad9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sunix-technology.com/admin/MSI_PRO.png",
      "pattern": "[url:value = 'https://sunix-technology.com/admin/MSI_PRO.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:03:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884843/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ef851a8-03d4-5896-a223-a3fa379899d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sunix-technology.com/admin/nice.png",
      "pattern": "[url:value = 'https://sunix-technology.com/admin/nice.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:03:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884844/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--970c155a-8fbb-5ce1-98f8-0821ffa9453a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_064844.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_064844.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:03:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884842/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--154848e4-9aad-50c9-b6f2-9d0905707933",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=17ivR2nQexwOGa4M4n2EC3jSNK6U1L3VP",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=17ivR2nQexwOGa4M4n2EC3jSNK6U1L3VP']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T09:02:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884841/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--077d2fb1-0f55-553b-a8f2-29a4295c97c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.87.90.117:47695/bin.sh",
      "pattern": "[url:value = 'http://42.87.90.117:47695/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T08:47:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884840/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d4e17e3-f07a-5b59-960a-86318c18d29b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rufrzzcs.betpublic.casino/4a66cc71-c779-4fb9-87b0-f93d98137453",
      "pattern": "[url:value = 'https://rufrzzcs.betpublic.casino/4a66cc71-c779-4fb9-87b0-f93d98137453']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T08:47:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884839/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1d6bada-13e8-5d2a-83cc-155758408b9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pbdb.bet303.site/d24ab38e-e011-41ec-8de0-793410a35e69",
      "pattern": "[url:value = 'https://pbdb.bet303.site/d24ab38e-e011-41ec-8de0-793410a35e69']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T08:44:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884838/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cef8c71c-f563-5cd1-b3e3-1da3fb9f7a8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.66.240:34144/i",
      "pattern": "[url:value = 'http://115.52.66.240:34144/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T08:17:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884837/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62e5a7c9-7e05-5579-81ac-6ec5ba66f53e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.147.222.58:35517/i",
      "pattern": "[url:value = 'http://175.147.222.58:35517/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T08:16:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884836/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--538462ef-b57e-5deb-b513-d8e2497fcb80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.75.16:59542/i",
      "pattern": "[url:value = 'http://110.36.75.16:59542/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T08:00:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884835/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fc032d3-e3db-5feb-827b-80fb7b29bda5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ggnytlvj.betnef.bet/fa4f0eea-2d10-4b3a-bfbe-a74f2ecf713f",
      "pattern": "[url:value = 'https://ggnytlvj.betnef.bet/fa4f0eea-2d10-4b3a-bfbe-a74f2ecf713f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:50:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884834/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90b08c65-842f-5f40-b5e7-a1d311728c68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.66.240:34144/bin.sh",
      "pattern": "[url:value = 'http://115.52.66.240:34144/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:49:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884833/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75079e06-a0d2-5992-b996-60bf7d2cfcd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.188.133:49576/i",
      "pattern": "[url:value = 'http://182.119.188.133:49576/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884832/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17570c77-4167-5d88-aad9-4c6d8b05d5ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lokb.bekabet.casino/96fbe0d7-3a88-4ad5-935c-d277dd4bfb34",
      "pattern": "[url:value = 'https://lokb.bekabet.casino/96fbe0d7-3a88-4ad5-935c-d277dd4bfb34']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:43:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884831/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a85990f0-4de9-52ab-b65f-50b1dfc72f35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://72.255.30.244:43882/i",
      "pattern": "[url:value = 'http://72.255.30.244:43882/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884830/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--749b9fa0-5cf4-5805-86a5-4a6df6978569",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.147.159.138:45619/i",
      "pattern": "[url:value = 'http://175.147.159.138:45619/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:36:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884829/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d3b753f-abb6-5e2b-ae21-102d61d4ce48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://151.233.193.84:34458/i",
      "pattern": "[url:value = 'http://151.233.193.84:34458/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:34:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884828/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03de9dbf-60cb-5fa4-8bc2-ae6e03a85c93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.90.129:53385/i",
      "pattern": "[url:value = 'http://110.36.90.129:53385/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:30:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884827/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d60accc-a5b6-5a37-982c-f3137f9dd8fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.75.16:59542/bin.sh",
      "pattern": "[url:value = 'http://110.36.75.16:59542/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:28:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884826/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f368799-4214-53c0-9174-205ed3b225cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.31.189.32:50387/i",
      "pattern": "[url:value = 'http://112.31.189.32:50387/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884825/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ce3354c-799c-51e0-84ca-14c246ad1451",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://py01df9v.bettilt90.com/?ublib=da466986-1bd2-45eb-a442-3ec86f3d66a9",
      "pattern": "[url:value = 'https://py01df9v.bettilt90.com/?ublib=da466986-1bd2-45eb-a442-3ec86f3d66a9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:24:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884824/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aa66106-10b5-51c8-96d9-552273355089",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.188.133:49576/bin.sh",
      "pattern": "[url:value = 'http://182.119.188.133:49576/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:16:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884823/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea41c062-3261-576d-ac47-712aee0e02e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_065141.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_065141.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:16:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884822/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aaf3e3f-4660-566d-9086-b53bc5d3cb54",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/viOfP",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/viOfP']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884819/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8b5f262-02d0-5161-b3a9-ecfa1ea28d1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/cvMxa",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/cvMxa']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884820/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54623590-af65-5367-9950-9e1d1adf125f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_213631.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_213631.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884821/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a944e000-f511-5766-8732-1c89fffc65df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_100330.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_100330.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884817/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--966c0feb-5c52-577b-9a8a-ae8bc94a9d1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://misty-cherry-cea3.uploadsimg.workers.dev/fZelY",
      "pattern": "[url:value = 'https://misty-cherry-cea3.uploadsimg.workers.dev/fZelY']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884818/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cf86b54-aae1-5f6d-8d99-1bcf6604fed3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/yagghasa.png",
      "pattern": "[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/yagghasa.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:15:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884816/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0523a93-299e-5837-a921-a13ed68f68cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/lkk.png",
      "pattern": "[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/lkk.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:14:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884815/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a14f7e7-438b-524a-a1c2-6dda23725bf2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hss.png",
      "pattern": "[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hss.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884812/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c5a180b-0dc4-5d82-8488-894eeef7bb93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/aasyaa.png",
      "pattern": "[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/aasyaa.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884813/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39ae2cef-cc09-5067-ad04-f0ff54a3f739",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hky.png",
      "pattern": "[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hky.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884814/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b0dc694-ab42-59cb-b73d-5741e09065d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/nwwaaa.png",
      "pattern": "[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/nwwaaa.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:14:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884811/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4669350b-fc45-5cca-bef2-4cfff0269247",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.204.193.16:54561/bin.sh",
      "pattern": "[url:value = 'http://27.204.193.16:54561/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884810/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0f4a89f-4481-59c3-8cea-50a5c56e9c54",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.227.219.92/35/cce/goodthingsforme.hta",
      "pattern": "[url:value = 'http://192.227.219.92/35/cce/goodthingsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:11:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884809/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4854fb7e-87f6-5e7b-b54a-a8224c98b14d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.3.45.6/16/breathefailandsuccess.hta",
      "pattern": "[url:value = 'http://192.3.45.6/16/breathefailandsuccess.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:10:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884807/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa2d9caf-df88-595d-8666-497e2a15eeb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://192.227.219.92/35/bestwishesforbetterpeoplescoming.js",
      "pattern": "[url:value = 'http://192.227.219.92/35/bestwishesforbetterpeoplescoming.js']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:10:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884808/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aff3d13f-2ecc-56c2-b388-89bfaba1f360",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tradeswheel.lovestoblog.com/MSI_125442.png",
      "pattern": "[url:value = 'https://tradeswheel.lovestoblog.com/MSI_125442.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:10:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884806/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63b5e7f9-f40a-5a8f-9411-889c45f9af75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tradeswheel.lovestoblog.com/img_002205.png",
      "pattern": "[url:value = 'https://tradeswheel.lovestoblog.com/img_002205.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:10:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884805/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9936ba53-112a-59c2-9ff0-3f1b20cc7978",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://193.177.220.9/25/mygoodnetworkingskillforgoodpersoncome.hta",
      "pattern": "[url:value = 'http://193.177.220.9/25/mygoodnetworkingskillforgoodpersoncome.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:10:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884804/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f5ba10b-e383-5029-b643-e7259ca9d331",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://193.177.220.9/img/c/img_181846.png",
      "pattern": "[url:value = 'http://193.177.220.9/img/c/img_181846.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:09:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884803/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5bb762f-e7b3-5e49-8f1a-fcfdb632d0d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://64.44.156.79/img/MSI_PRO.png",
      "pattern": "[url:value = 'http://64.44.156.79/img/MSI_PRO.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:09:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884802/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f4d3835-3ed9-52d8-bba3-20c1ac829729",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.90.129:53385/bin.sh",
      "pattern": "[url:value = 'http://110.36.90.129:53385/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:08:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884801/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6c5d087-3dad-5c7b-991a-a6bef5bae2b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.64.27:34779/i",
      "pattern": "[url:value = 'http://110.37.64.27:34779/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:05:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884800/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9bfc6f4-9738-57aa-9f21-2e5bd5ed9553",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.99.187.113/img_094148.png",
      "pattern": "[url:value = 'http://209.99.187.113/img_094148.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884798/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--907d7715-9c6e-5021-a75e-38df2d6104a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.99.187.113/img_093953.png",
      "pattern": "[url:value = 'http://209.99.187.113/img_093953.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884799/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32de6b6d-0099-57e0-b0c3-d64a0e2fa675",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.99.187.113/img_104942.png",
      "pattern": "[url:value = 'http://209.99.187.113/img_104942.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:04:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884795/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79728f80-0f3d-5017-8089-19787c9ac1cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.99.187.113/img_105103.png",
      "pattern": "[url:value = 'http://209.99.187.113/img_105103.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:04:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884796/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f93760a9-235f-53c5-94d2-9ef39a376a0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://209.99.187.113/img_105140.png",
      "pattern": "[url:value = 'http://209.99.187.113/img_105140.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T07:04:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884797/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dde8bb04-0144-59e1-ae6b-b5a586c33a70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.36.250.231:34986/i",
      "pattern": "[url:value = 'http://36.36.250.231:34986/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:57:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884794/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bcc780d-0dba-55db-980f-c62a659e405e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.103.121.32:41365/bin.sh",
      "pattern": "[url:value = 'http://59.103.121.32:41365/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:44:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884793/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca3411dc-2f08-58ff-aa38-734f74c1fea6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://teoz.radioshartbandi.casino/2cdea2e3-604f-49ff-93ff-b11ed5bb60d5",
      "pattern": "[url:value = 'https://teoz.radioshartbandi.casino/2cdea2e3-604f-49ff-93ff-b11ed5bb60d5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884792/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84fd360d-a70b-5b0d-9633-5494090a4354",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.36.250.231:34986/bin.sh",
      "pattern": "[url:value = 'http://36.36.250.231:34986/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:36:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884791/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a6005b8-ac68-56d4-9967-5d20bcbdd0a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.64.27:34779/bin.sh",
      "pattern": "[url:value = 'http://110.37.64.27:34779/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:34:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884790/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--992eeb6c-c1c0-534e-a3c8-39fd9c06c29d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jcttadgn.betlivo90.bet/64a25988-c464-4b9f-a8d7-112f385a08df",
      "pattern": "[url:value = 'https://jcttadgn.betlivo90.bet/64a25988-c464-4b9f-a8d7-112f385a08df']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:34:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884789/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22a361f7-e0e9-5e15-80bb-3d293aeb80b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.25.189:53387/i",
      "pattern": "[url:value = 'http://110.37.25.189:53387/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884788/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3624633-7fde-5330-a78e-8365f978e946",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://leconto.lol/file.js",
      "pattern": "[url:value = 'https://leconto.lol/file.js']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884787/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af736f9a-8efa-58cb-946e-101a90ff94c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.174.98.247:39760/i",
      "pattern": "[url:value = 'http://175.174.98.247:39760/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:17:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884786/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63e10d9f-3653-5a05-b494-8b2647060801",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.147.222.58:35517/bin.sh",
      "pattern": "[url:value = 'http://175.147.222.58:35517/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:16:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884785/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--731e4f89-078c-5d13-b930-da8e50a85aad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cppqqgxg.betlivo90.bet/6e25354a-10d9-4ca7-a5af-3bfe80141fbd",
      "pattern": "[url:value = 'https://cppqqgxg.betlivo90.bet/6e25354a-10d9-4ca7-a5af-3bfe80141fbd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:11:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884784/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ffdf3da-81ad-5cc8-98f3-24feee254acf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://151.232.235.118:41810/i",
      "pattern": "[url:value = 'http://151.232.235.118:41810/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:02:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884783/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da0c6d50-64ec-5d72-ba8d-bce7c5ae60f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.ppc",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884773/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53d5ae2b-5db2-5fb4-a0ab-01442122d578",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.arc",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884774/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3be65bf1-7515-5dd0-b150-480d3c9bdf78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz.sh",
      "pattern": "[url:value = 'http://41.216.189.92/nz.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884775/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cf61a34-90d9-5606-97f9-715e01312787",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.m68k",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884776/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c98e70a8-4c94-5210-a499-834d74f6ebe0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.mips",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884777/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f07bfbd1-9df3-5290-b5bd-d6c96f1372ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.x86",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884778/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bea2a723-2e61-5143-bd51-6f0e139164cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.sh4",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884779/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b270146-808c-565c-b637-b9e4e8279c7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.mpsl",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884780/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cfcc38f-534f-5438-a9e2-dbfd2faf5b5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.i686",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884781/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3efb37e5-24a4-5f4b-86ff-6ead9fa2d3e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.arm6",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884782/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--324d9c6f-9483-5b0d-b0dd-c4f612a18b2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/o.xml",
      "pattern": "[url:value = 'http://41.216.189.92/nz/o.xml']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884771/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c8752c2-f76f-5937-878e-cc26c23d79c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.spc",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884772/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fec13da-cabf-51d8-a9f8-9e1165dd3183",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.arm",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884768/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ffc1e21-000b-5f6c-9980-b7efe3b77797",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.x86_64",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884769/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27fa86bb-268b-51cc-a133-301be71381dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.arm5",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884770/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb50ff52-3534-53ea-acc2-26e008a4c67c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/nz.arm7",
      "pattern": "[url:value = 'http://41.216.189.92/nz/nz.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884765/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c9c70d-cfe0-5c6c-998e-f2a5f1e236bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/nz/debug",
      "pattern": "[url:value = 'http://41.216.189.92/nz/debug']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884766/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd54bf89-0f7e-5e61-89ac-89f823b29847",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.92/o.xml",
      "pattern": "[url:value = 'http://41.216.189.92/o.xml']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T06:01:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884767/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--344a0ec6-e2e7-5c83-91e9-ce01969bae00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://amzo-s.s3.ap-southeast-1.amazonaws.com/A7126.dat",
      "pattern": "[url:value = 'http://amzo-s.s3.ap-southeast-1.amazonaws.com/A7126.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:48:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884763/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d19efa5d-9db2-5f7c-9995-7aedb53ebd70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://amzo-s.s3.ap-southeast-1.amazonaws.com/A1121.dat",
      "pattern": "[url:value = 'http://amzo-s.s3.ap-southeast-1.amazonaws.com/A1121.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:48:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884764/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e9836c8-d09f-56b4-b25d-29fb523a4366",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.174.98.247:39760/bin.sh",
      "pattern": "[url:value = 'http://175.174.98.247:39760/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:48:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884762/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f972263a-d828-5218-9a29-e011a2760d07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.55.195:45633/i",
      "pattern": "[url:value = 'http://182.116.55.195:45633/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:46:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884761/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb0d8ba2-3fec-5c6e-aaa3-d9a9ac8462e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.225.45.14:46428/i",
      "pattern": "[url:value = 'http://112.225.45.14:46428/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:42:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884760/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--010dfe37-a7ba-5f69-9e0c-063d6591ef36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pyrd.radioshartbandi.bet/e71972a3-5e05-4b0c-9959-0f53fd92a321",
      "pattern": "[url:value = 'https://pyrd.radioshartbandi.bet/e71972a3-5e05-4b0c-9959-0f53fd92a321']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:41:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884759/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a768c652-1366-5fd7-bb93-89a91c174f19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://peniclean.com/nvd_driver_dll.exe",
      "pattern": "[url:value = 'https://peniclean.com/nvd_driver_dll.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884758/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e672c161-99da-581c-b684-33031a24d223",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.56.66.242:58971/i",
      "pattern": "[url:value = 'http://115.56.66.242:58971/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:35:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884757/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5145687a-68ad-5e57-848e-cbf90cd4c038",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/arm5",
      "pattern": "[url:value = 'http://217.60.195.214/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:35:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884756/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f630408-f747-5c86-a101-7ab1966a9185",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/mips",
      "pattern": "[url:value = 'http://217.60.195.214/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:34:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884754/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--017a43ea-09d6-5565-9ff8-124f0dd64af5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/mipsel",
      "pattern": "[url:value = 'http://217.60.195.214/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:34:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884755/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7154f73-d67c-577f-bbec-5f5901a3a8e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/arm7",
      "pattern": "[url:value = 'http://217.60.195.214/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:34:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884749/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2febe7c9-51ff-564d-81ed-1fd90f2ea0fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/wget.sh",
      "pattern": "[url:value = 'http://217.60.195.214/wget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:34:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884750/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--531ebc91-b185-5d40-923d-44b9ae859862",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/curl.sh",
      "pattern": "[url:value = 'http://217.60.195.214/curl.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:34:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884751/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17130eea-dfef-5f50-bd40-6aa42abfee91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/arm",
      "pattern": "[url:value = 'http://217.60.195.214/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:34:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884752/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbf933a4-01af-588c-a72c-736e362fa4cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.214/mpsl",
      "pattern": "[url:value = 'http://217.60.195.214/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:34:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884753/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8562a9ed-e092-5bf4-a5c0-ba9c21fbbd50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://151.232.235.118:41810/bin.sh",
      "pattern": "[url:value = 'http://151.232.235.118:41810/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:33:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884748/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f42b28a-1476-56c6-a6d1-6574913c5b69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.210.139.16:38843/bin.sh",
      "pattern": "[url:value = 'http://115.210.139.16:38843/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:26:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884747/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcdf5417-147f-5b5d-a24b-f6ae70f00515",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zh3l5x4j.betstrong.bet/?ublib=412cb1e4-c1df-4197-9578-f618d82555d1",
      "pattern": "[url:value = 'https://zh3l5x4j.betstrong.bet/?ublib=412cb1e4-c1df-4197-9578-f618d82555d1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:23:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884746/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--420ea1d6-9531-5735-83fb-af1d58067d01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.55.195:45633/bin.sh",
      "pattern": "[url:value = 'http://182.116.55.195:45633/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884745/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbe43222-4537-5083-ba39-53e3d37a60f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/vbbbfff.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/vbbbfff.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884744/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12ee4842-1985-588d-b87f-4d47c2057f4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/imggem.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/imggem.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884738/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de74a0b9-bb27-54d1-b3a1-ff6a3105fe5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/freeet.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/freeet.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884739/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4e2de65-5e6b-5a64-96a4-ac659bd5e484",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/popopo.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/popopo.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884740/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dae1ca8d-b2e8-562a-b80d-cc6ba1745c22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/imgsert.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/imgsert.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884741/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62aeb1d6-603d-5084-ad89-474b9454bab5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/cvvv.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/cvvv.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884742/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c898fde-e598-5fe1-aed4-6abb88341c7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/rrrrr.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/rrrrr.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884743/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dd552db-bac5-5eae-b20c-c30d71f01405",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/munddd.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/munddd.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884735/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5c5c3fc-a741-5445-9c91-59a1c3b4df31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/img_113833.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/img_113833.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884736/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12b817b7-c11e-57a1-8dea-3debfcfd5a5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/crryy.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/crryy.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884737/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a27d15f-420f-5f31-9e95-318d8f59b8d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.146.81.130/crypter/prorump.png",
      "pattern": "[url:value = 'http://45.146.81.130/crypter/prorump.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884734/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2d41815-fdd0-5b5a-9590-7d152cceb574",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_1aaf6b45ead8e1e7.msi",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_1aaf6b45ead8e1e7.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:20:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884733/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea8ee46e-a22a-5c0d-b18b-bf3e0090aac3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.134.174.155:34862/i",
      "pattern": "[url:value = 'http://222.134.174.155:34862/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884732/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b83aeb17-2101-5aff-9593-edb59677cacf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pqyajjta.betgar.bet/98fcfd17-eedf-4258-ab16-af36f8119059",
      "pattern": "[url:value = 'https://pqyajjta.betgar.bet/98fcfd17-eedf-4258-ab16-af36f8119059']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884731/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ed6549f-dd6f-568f-bb46-24cd892e5deb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/arm6",
      "pattern": "[url:value = 'http://141.11.88.144/bins/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884718/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3fd58f7-84e1-552d-ba5f-88d680a4ea19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/arm5",
      "pattern": "[url:value = 'http://141.11.88.144/bins/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884719/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cff6a275-35e3-561a-b50a-be03e48187a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/sh4",
      "pattern": "[url:value = 'http://141.11.88.144/bins/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884720/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ef03166-5ed6-5a8b-8b19-9853e4c75a0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/m68k",
      "pattern": "[url:value = 'http://141.11.88.144/bins/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884721/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5232adb0-76fd-5684-96f3-5bf9ead43cc8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/spc",
      "pattern": "[url:value = 'http://141.11.88.144/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884722/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0adeb049-b11d-56b2-a2f6-7cfaeb2d67b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/i686",
      "pattern": "[url:value = 'http://141.11.88.144/bins/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884723/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d00cbb6-482d-52d0-80f4-2ad0f0b7df93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/x86",
      "pattern": "[url:value = 'http://141.11.88.144/bins/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884724/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5aa578b-1596-56c0-9e91-596f96b9df02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/x86_64",
      "pattern": "[url:value = 'http://141.11.88.144/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884725/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27a49779-089f-559e-b05e-52a74ad520b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/arm7",
      "pattern": "[url:value = 'http://141.11.88.144/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884726/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffd98fa1-324c-5cf0-9d17-e0e5465d3db9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/arm",
      "pattern": "[url:value = 'http://141.11.88.144/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884727/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c523936c-aad9-582c-8be5-bc1676436558",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/ppc",
      "pattern": "[url:value = 'http://141.11.88.144/bins/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884728/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88365fe6-cbb6-56b4-9acb-a2dfcc3aa362",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/mips",
      "pattern": "[url:value = 'http://141.11.88.144/bins/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884729/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c1d2f96-c5ea-5248-a4b3-7c133089fb97",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.144/bins/mpsl",
      "pattern": "[url:value = 'http://141.11.88.144/bins/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884730/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d613051-99db-5724-a6da-acaf13471c2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.213.197.151:38419/i",
      "pattern": "[url:value = 'http://171.213.197.151:38419/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:12:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884717/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c03d8b1-0594-5659-93ae-10ef4c53a93d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://202.163.107.168:33531/i",
      "pattern": "[url:value = 'http://202.163.107.168:33531/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:11:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884716/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55ddc7f5-4ff9-55b8-b484-44fa38bb6464",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.19.30:56226/i",
      "pattern": "[url:value = 'http://115.48.19.30:56226/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T05:05:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884715/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d82179-7416-570d-b9a0-3106ceadaeb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.85.134.227:46174/i",
      "pattern": "[url:value = 'http://42.85.134.227:46174/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884714/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28fba201-8744-5acd-981c-c44fba1d896a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pmhy.gorgbet.net/d0682716-1747-4a82-b607-5eab5cb757da",
      "pattern": "[url:value = 'https://pmhy.gorgbet.net/d0682716-1747-4a82-b607-5eab5cb757da']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:45:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884713/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--623d5f5c-92d1-5635-b790-1781140105e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.42.30.19:53035/i",
      "pattern": "[url:value = 'http://125.42.30.19:53035/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:43:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884712/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1601a19a-41ff-596f-a17a-cf7ba4559d2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.64.31:45088/i",
      "pattern": "[url:value = 'http://110.37.64.31:45088/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884711/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0903d8db-322c-5265-966e-f078f9e71036",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.19.30:56226/bin.sh",
      "pattern": "[url:value = 'http://115.48.19.30:56226/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:41:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884710/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f21f8c8-c1d9-5a2e-ba00-fd9f9489913f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.138.172:53425/bin.sh",
      "pattern": "[url:value = 'http://59.96.138.172:53425/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:31:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884709/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a507b39-32e6-56e3-8afc-daddf923fd09",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.85.134.227:46174/bin.sh",
      "pattern": "[url:value = 'http://42.85.134.227:46174/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:26:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884708/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42f8c6ce-780b-5e0b-aeac-1f80fa0f8ed7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.42.30.19:53035/bin.sh",
      "pattern": "[url:value = 'http://125.42.30.19:53035/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:19:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884707/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79a92b79-3d95-5012-bd0c-3c0cef046d3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fphhkiyz.betforward.download/320487ba-5ac1-4355-be2e-c210718eaca1",
      "pattern": "[url:value = 'https://fphhkiyz.betforward.download/320487ba-5ac1-4355-be2e-c210718eaca1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884706/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d884220-5fa9-56c0-9bef-3a5cf55acf82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.74.11:52121/i",
      "pattern": "[url:value = 'http://110.37.74.11:52121/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:16:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884705/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d94f777-9af3-53f7-9bb3-11e7dfddf11e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://q0oocq7q.basari90bet.com/?ublib=0bd5fe14-2916-46a2-9304-d5ad8359b0e4",
      "pattern": "[url:value = 'https://q0oocq7q.basari90bet.com/?ublib=0bd5fe14-2916-46a2-9304-d5ad8359b0e4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884704/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4691172e-e51c-5120-8f6a-5fe7a1f3b7d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://1qvrznky.runtimebeacon.top/?ublib=52cb2ddd-245c-4551-8f80-7741bbd85c26",
      "pattern": "[url:value = 'https://1qvrznky.runtimebeacon.top/?ublib=52cb2ddd-245c-4551-8f80-7741bbd85c26']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T04:06:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884703/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8874e95e-a0f5-5653-b31b-6fabe9b7e8da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.185/s0907.exe",
      "pattern": "[url:value = 'http://62.60.226.185/s0907.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:59:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884702/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22916460-34c9-513a-930f-aec7525739af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.207.229.230:41353/i",
      "pattern": "[url:value = 'http://27.207.229.230:41353/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:50:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884701/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1134f81-9a7c-5664-aed5-637747478b0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.207.229.230:41353/bin.sh",
      "pattern": "[url:value = 'http://27.207.229.230:41353/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884700/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eeb9d5cd-babe-529b-a3c2-6f6aff5b119a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://akvz.behtarin-site-shartbandi.com/b0a88c94-48f1-442c-88f8-13c44b90c37a",
      "pattern": "[url:value = 'https://akvz.behtarin-site-shartbandi.com/b0a88c94-48f1-442c-88f8-13c44b90c37a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:35:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884699/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--136b5109-a89f-537e-a9a2-acf6f9032454",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.10.34:59342/i",
      "pattern": "[url:value = 'http://182.116.10.34:59342/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:34:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884698/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--203947c3-1d1d-5f97-a06a-975db5016e14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zcnevugr.betewin.poker/d87ecd56-a6fc-4b2f-8bc4-3ac0c18902e0",
      "pattern": "[url:value = 'https://zcnevugr.betewin.poker/d87ecd56-a6fc-4b2f-8bc4-3ac0c18902e0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:23:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884697/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3142ade-87cf-51b9-bee9-28766260ee00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fzneds6a.betropol.bet/?ublib=405b2a7f-1d97-4e35-85a2-4fbe89e9e0c6",
      "pattern": "[url:value = 'https://fzneds6a.betropol.bet/?ublib=405b2a7f-1d97-4e35-85a2-4fbe89e9e0c6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884696/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6da888f2-bbb9-5814-90b2-b336ea4388bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.223.204.195:43479/i",
      "pattern": "[url:value = 'http://27.223.204.195:43479/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:16:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884695/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23607843-fabd-56b1-9cbb-9c97c6e8ac10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.10.34:59342/bin.sh",
      "pattern": "[url:value = 'http://182.116.10.34:59342/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884694/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcbaeabe-dad4-59a8-a32c-e9d2ce209f59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.205.165.30:48400/i",
      "pattern": "[url:value = 'http://117.205.165.30:48400/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884693/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1ec8f20-3922-52aa-9edc-a21db4d3d138",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.44.158:46803/i",
      "pattern": "[url:value = 'http://110.37.44.158:46803/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T03:00:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884692/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af153525-9433-5226-a18c-a9eeea079d16",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.31.132:41531/bin.sh",
      "pattern": "[url:value = 'http://110.36.31.132:41531/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884691/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--864663db-6883-54b3-b7c4-4bdc147a80cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.223.204.195:43479/bin.sh",
      "pattern": "[url:value = 'http://27.223.204.195:43479/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:44:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884690/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5102d0ec-244a-5fa6-85be-e7c64ff1bb8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.178.52.170:46321/i",
      "pattern": "[url:value = 'http://110.178.52.170:46321/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:42:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884689/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebaf838f-f027-5f07-81e3-fe3937b9b93c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tvcp.behtarin-site-shartbandi-football.bet/cfce73ac-a271-4724-95f2-61e065641720",
      "pattern": "[url:value = 'https://tvcp.behtarin-site-shartbandi-football.bet/cfce73ac-a271-4724-95f2-61e065641720']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:37:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884688/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d8af4aa-d057-5dbb-9a24-9a9c2ea6e77b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.44.158:46803/bin.sh",
      "pattern": "[url:value = 'http://110.37.44.158:46803/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:33:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884687/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6fe3fdf-5ad9-5d34-be85-3888d2850d45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xcfumaos.betebet.poker/172147ad-cd13-406f-b389-bfd5614f5f7a",
      "pattern": "[url:value = 'https://xcfumaos.betebet.poker/172147ad-cd13-406f-b389-bfd5614f5f7a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884686/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5ad68fc-b56c-5255-bffd-d319fde495d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.20.227:35555/i",
      "pattern": "[url:value = 'http://110.36.20.227:35555/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884685/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f188f78e-f575-5256-8b34-20426c43a519",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.205.165.30:48400/bin.sh",
      "pattern": "[url:value = 'http://117.205.165.30:48400/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:21:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884684/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95553031-d6f3-52f5-b837-8d81661f2602",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.126.254.194:46369/i",
      "pattern": "[url:value = 'http://125.126.254.194:46369/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:18:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884683/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46dec86f-7544-5b89-939f-2a63a94eb5ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://124.131.128.105:43733/bin.sh",
      "pattern": "[url:value = 'http://124.131.128.105:43733/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884682/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85f1f847-e191-5e74-9cf8-3e373dbbb706",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.156.166.84:53500/i",
      "pattern": "[url:value = 'http://94.156.166.84:53500/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:06:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884681/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41c07204-cd2e-5e92-bd5b-7bff33d21e0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.20.227:35555/bin.sh",
      "pattern": "[url:value = 'http://110.36.20.227:35555/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:05:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884680/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7750262a-dc3b-514b-9644-e7a46d6685f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.87.231.179:45494/i",
      "pattern": "[url:value = 'http://39.87.231.179:45494/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T02:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884679/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74e001b8-7860-56c4-a594-fbe29db4fdb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_899d2dee1a40dac8.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_899d2dee1a40dac8.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T01:55:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884678/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--523ab50d-3b16-5e65-b4ac-7cba8be7a2a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://skgm.bahsegel90.com/062cc5a1-ada2-4ee3-a592-64e959922b68",
      "pattern": "[url:value = 'https://skgm.bahsegel90.com/062cc5a1-ada2-4ee3-a592-64e959922b68']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T01:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884677/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9c2bad5-c9e3-50ac-8c9a-ed817910cdb7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hlhmjajy.onjabet1.com/1dbd4306-e631-41d6-8746-3117975f9edb",
      "pattern": "[url:value = 'https://hlhmjajy.onjabet1.com/1dbd4306-e631-41d6-8746-3117975f9edb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T01:32:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884676/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4eb8be1d-2e2f-5475-9e7e-83c6d589c725",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gpukjn7z.betraca.bet/?ublib=855d2f7e-46d6-4f06-a2fb-824bda0f2165",
      "pattern": "[url:value = 'https://gpukjn7z.betraca.bet/?ublib=855d2f7e-46d6-4f06-a2fb-824bda0f2165']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T01:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884675/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ddf8cf8-e695-5ded-a78a-e913dde8a64d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.171.177.193:35757/i",
      "pattern": "[url:value = 'http://45.171.177.193:35757/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T01:20:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884674/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04611f83-73a6-55ba-bfff-c65b67564210",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.171.177.193:35757/bin.sh",
      "pattern": "[url:value = 'http://45.171.177.193:35757/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T01:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884673/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46a0907b-e210-5c59-ad6b-edd32419d91f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.38.26.9:47753/bin.sh",
      "pattern": "[url:value = 'http://171.38.26.9:47753/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T01:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884672/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--498b8c7b-a2a2-55a1-993b-d4d5c7b7c698",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.80.169:35496/i",
      "pattern": "[url:value = 'http://110.36.80.169:35496/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884671/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9c12cce-0d42-5cd0-8b1c-b42cb8d60955",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://174.34.242.49:34523/i",
      "pattern": "[url:value = 'http://174.34.242.49:34523/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:48:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884670/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--765b3e78-a262-5c1e-9387-065e8f56c3a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.205.250:48613/i",
      "pattern": "[url:value = 'http://182.113.205.250:48613/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:46:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884669/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24b6832f-a47b-5abf-a7e8-a1ae760002bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.52.87:43810/i",
      "pattern": "[url:value = 'http://61.52.52.87:43810/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:40:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884668/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28376238-09ac-5b15-952b-740734027a5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zbrz.bahigo90bet.com/b115a713-c55f-4557-8faf-ac81f20e14bb",
      "pattern": "[url:value = 'https://zbrz.bahigo90bet.com/b115a713-c55f-4557-8faf-ac81f20e14bb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:36:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884667/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f781f677-2275-5c95-94be-6130b59ae8ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.200.103.187:39089/i",
      "pattern": "[url:value = 'http://27.200.103.187:39089/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:35:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884666/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b9c6892-11f6-5b84-a65b-b49835bc26b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.80.169:35496/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.169:35496/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:26:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884665/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c27a809b-2579-511a-a0f7-6ffe42fd24ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qfgzzlba.bet90forward.win/ca4cca20-0ddd-4d82-82e8-d9037d2e73aa",
      "pattern": "[url:value = 'https://qfgzzlba.bet90forward.win/ca4cca20-0ddd-4d82-82e8-d9037d2e73aa']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:21:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884664/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cc2caa9-55fd-5986-aebb-1e569bc8d770",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jbiyqacd.bcgame.shop/5f6b087a-1dbe-4226-abca-d31fcece3081",
      "pattern": "[url:value = 'https://jbiyqacd.bcgame.shop/5f6b087a-1dbe-4226-abca-d31fcece3081']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884663/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6946409-da43-536b-917f-393eb92ab12a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.200.103.187:39089/bin.sh",
      "pattern": "[url:value = 'http://27.200.103.187:39089/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:06:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884662/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f696c6af-8183-5a50-adf0-a6920273f312",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.172.22.97:42567/i",
      "pattern": "[url:value = 'http://5.172.22.97:42567/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-11T00:05:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884661/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08ebc67b-9cae-5670-884e-d38589ab9f4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.114.190:47798/i",
      "pattern": "[url:value = 'http://182.116.114.190:47798/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:59:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884660/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f02d7fd9-921d-5337-b8b3-e18cffa443d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.203.173.154:43816/i",
      "pattern": "[url:value = 'http://27.203.173.154:43816/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884659/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df93be32-d569-5ddf-8e82-93ac055b3dd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.67.105:35213/i",
      "pattern": "[url:value = 'http://123.11.67.105:35213/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:48:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884658/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab548a7f-c80b-5a09-b39d-0ae7cecc6a45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.227.177.147:33531/bin.sh",
      "pattern": "[url:value = 'http://42.227.177.147:33531/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:39:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884657/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e630f265-4dc7-5ff7-9d6c-9a564808ac9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.231.16.175:48587/i",
      "pattern": "[url:value = 'http://113.231.16.175:48587/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884656/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7622710-9856-52d0-ae75-804dcafe9b4d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.114.190:47798/bin.sh",
      "pattern": "[url:value = 'http://182.116.114.190:47798/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:35:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884655/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdb02e89-59f1-5eb8-a0fa-ee55d8bc16c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.218.241.42:43649/i",
      "pattern": "[url:value = 'http://113.218.241.42:43649/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884653/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d90f80f0-cc59-57ba-a72c-89f6b5bf88aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tvbx.bahigo.casino/97ccca6a-0de6-420e-abd2-c48f7e2d9fbb",
      "pattern": "[url:value = 'https://tvbx.bahigo.casino/97ccca6a-0de6-420e-abd2-c48f7e2d9fbb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884654/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe4599f9-37ae-5c7d-83dd-dad02262b9f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.203.173.154:43816/bin.sh",
      "pattern": "[url:value = 'http://27.203.173.154:43816/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884652/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c254bf9-e5f4-5482-8cb8-8452956acc83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zf82e23p.behtarin-site-shartbandi-football.com/?ublib=101d2262-4e45-424b-b8cc-e804b56c6a5b",
      "pattern": "[url:value = 'https://zf82e23p.behtarin-site-shartbandi-football.com/?ublib=101d2262-4e45-424b-b8cc-e804b56c6a5b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:16:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884651/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c0b4e3c-922a-5a16-b283-4c633d4bed49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.67.105:35213/bin.sh",
      "pattern": "[url:value = 'http://123.11.67.105:35213/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884650/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa263ae0-8c36-506b-806f-8520435adf70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://35quvguj.banko90bet.com/?ublib=3e43ba45-029f-4e75-a84e-dd189faa0898",
      "pattern": "[url:value = 'https://35quvguj.banko90bet.com/?ublib=3e43ba45-029f-4e75-a84e-dd189faa0898']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884649/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22429421-10d8-579e-aed9-62d5beb14012",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://y06e8hvi.proxyharbor.top/?ublib=1331863c-6b1e-4347-95c8-c531986d58ec",
      "pattern": "[url:value = 'https://y06e8hvi.proxyharbor.top/?ublib=1331863c-6b1e-4347-95c8-c531986d58ec']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:03:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884648/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a216f02d-b8d3-59cd-aba7-793a7797d0b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.29.225:33764/i",
      "pattern": "[url:value = 'http://115.50.29.225:33764/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T23:00:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884647/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0532abed-47dc-5c85-9d26-e1a876c24c8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.243.8:47499/i",
      "pattern": "[url:value = 'http://42.239.243.8:47499/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:54:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884646/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c91323c-fa43-5b26-b693-ff808dd8875b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.29.225:33764/bin.sh",
      "pattern": "[url:value = 'http://115.50.29.225:33764/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884645/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--448be452-599d-598b-a930-e9b61409f66a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rvbpwiks.bazisangkaqazgeychidancepoli.com/ad8cbf4a-ec88-4052-b636-e46606982846",
      "pattern": "[url:value = 'https://rvbpwiks.bazisangkaqazgeychidancepoli.com/ad8cbf4a-ec88-4052-b636-e46606982846']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884644/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e9f5f95-4c4d-561a-bb1d-5321dfd81ddb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://122.190.164.82:42684/i",
      "pattern": "[url:value = 'http://122.190.164.82:42684/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:34:55Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884643/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--311c1a3a-f17a-5d8f-bcf8-d09eba53927c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.243.8:47499/bin.sh",
      "pattern": "[url:value = 'http://42.239.243.8:47499/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:33:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884642/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--537f0db6-0c66-5c06-83e3-52d7d2718d41",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tvzo.backgammon.download/06e49b1d-1311-46bc-858e-cb29b76f5164",
      "pattern": "[url:value = 'https://tvzo.backgammon.download/06e49b1d-1311-46bc-858e-cb29b76f5164']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884641/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01a74af0-42f9-56f4-bc3d-a1df0236e760",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.67.156:59200/i",
      "pattern": "[url:value = 'http://115.50.67.156:59200/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:25:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884640/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--399bcbb1-a009-5b83-8c3c-2df21f13358d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.233.137:52462/i",
      "pattern": "[url:value = 'http://182.119.233.137:52462/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:12:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884639/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--616cb4f8-80b3-5b26-852f-f2a835c31fd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.87.36.107:57053/bin.sh",
      "pattern": "[url:value = 'http://39.87.36.107:57053/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884638/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac647d12-558f-540c-8c09-8a84dfa32850",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://190.115.80.35:49166/i",
      "pattern": "[url:value = 'http://190.115.80.35:49166/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:09:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884637/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--532b607a-dcd4-586f-890e-73f4e819633e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.199.160:48900/bin.sh",
      "pattern": "[url:value = 'http://115.55.199.160:48900/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:09:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884636/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d72b99a-39bc-57fd-8b11-dbba06551169",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.138/hiddenbin/boatnet.x86",
      "pattern": "[url:value = 'http://141.11.88.138/hiddenbin/boatnet.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884629/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef1385fd-e866-5dfc-a7a5-1a1453f456f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.138/hiddenbin/boatnet.arm5",
      "pattern": "[url:value = 'http://141.11.88.138/hiddenbin/boatnet.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884630/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--649bbffc-8f56-5c77-a5ba-424e1347f85d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.138/hiddenbin/boatnet.arm6",
      "pattern": "[url:value = 'http://141.11.88.138/hiddenbin/boatnet.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884631/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--439ffdfa-1941-5414-83cf-2b8a85ce795d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.138/hiddenbin/boatnet.ppc",
      "pattern": "[url:value = 'http://141.11.88.138/hiddenbin/boatnet.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884632/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--504dffb6-aebb-5edd-8de6-3605d752a77a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.138/hiddenbin/boatnet.arm",
      "pattern": "[url:value = 'http://141.11.88.138/hiddenbin/boatnet.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884633/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19ebdff3-6f84-56e1-820f-6931f5695420",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.138/hiddenbin/boatnet.sh4",
      "pattern": "[url:value = 'http://141.11.88.138/hiddenbin/boatnet.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884634/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d6099a7-0364-5888-ac73-29c432819ccd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.138/hiddenbin/boatnet.mpsl",
      "pattern": "[url:value = 'http://141.11.88.138/hiddenbin/boatnet.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T22:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884635/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5161585-b635-5736-ba20-dcefe3600444",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.67.156:59200/bin.sh",
      "pattern": "[url:value = 'http://115.50.67.156:59200/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:59:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884628/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a6c8995-dea5-523d-b883-1d05fd3898aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.249.199.3:34843/i",
      "pattern": "[url:value = 'http://103.249.199.3:34843/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884627/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb414b83-5f4b-5f87-98b4-be1deb5fde6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.249.199.3:34843/bin.sh",
      "pattern": "[url:value = 'http://103.249.199.3:34843/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:53:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884626/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92c7a074-5354-541c-b7af-f7b0d9dbf6b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://38.56.21.66:45423/i",
      "pattern": "[url:value = 'http://38.56.21.66:45423/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:52:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884625/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7d1aa28-a1cc-56f3-98cc-11d63a55a8b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://190.115.80.35:49166/bin.sh",
      "pattern": "[url:value = 'http://190.115.80.35:49166/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:44:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884624/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95da6b12-4624-531a-8e53-50385c3a2360",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ayehtlgp.systemcompass.top/768b92fd-8947-4051-a609-c97b1c206c0c",
      "pattern": "[url:value = 'https://ayehtlgp.systemcompass.top/768b92fd-8947-4051-a609-c97b1c206c0c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:43:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884623/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0456bc5-e76e-5b96-a72c-4e597f6847b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://38.56.21.66:45423/bin.sh",
      "pattern": "[url:value = 'http://38.56.21.66:45423/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884622/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbabf75c-8adf-5ff5-8a2b-8443bb17b46d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.119.233.137:52462/bin.sh",
      "pattern": "[url:value = 'http://182.119.233.137:52462/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:23:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884621/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f2bcb54-5e07-57f8-a9c5-30b3cb0f0eed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.11.225:60680/i",
      "pattern": "[url:value = 'http://110.36.11.225:60680/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:19:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884620/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4af14c49-cc17-50f7-9e00-2db3226b7d1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ggj2o3iw.zaribbala.bet/?ublib=3f836d5c-a13a-485a-a2cb-48fa84842d97",
      "pattern": "[url:value = 'https://ggj2o3iw.zaribbala.bet/?ublib=3f836d5c-a13a-485a-a2cb-48fa84842d97']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:15:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884619/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d5ce0bc-6a3e-5b3c-935a-0db85664ebef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ovya.logiccascade.top/5446b5fe-985e-4ed5-b61e-12eb6ebadfba",
      "pattern": "[url:value = 'https://ovya.logiccascade.top/5446b5fe-985e-4ed5-b61e-12eb6ebadfba']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T21:12:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884618/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a757367d-07a0-5302-8d24-bafed50528ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://47.212.193.38:46802/i",
      "pattern": "[url:value = 'http://47.212.193.38:46802/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:57:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884617/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e811e1d-5efc-5824-a461-d6316744b0b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tjdxsecd.stacknexus.top/2cd7056c-4997-4c0b-b88b-7beea915859f",
      "pattern": "[url:value = 'https://tjdxsecd.stacknexus.top/2cd7056c-4997-4c0b-b88b-7beea915859f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884616/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47d6b9c4-a7af-5235-9258-8bcdcaf5a8ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.96.128.94:46071/i",
      "pattern": "[url:value = 'http://115.96.128.94:46071/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:47:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884615/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9ae4a79-544d-51bc-a25c-d9d9aac40939",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.84.11:46161/i",
      "pattern": "[url:value = 'http://182.116.84.11:46161/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:37:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884613/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e02b45b-1d1e-5783-94d0-dc78068e1ea0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.204.193.16:54561/i",
      "pattern": "[url:value = 'http://27.204.193.16:54561/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:37:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884614/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9a6f81f-ad4d-5283-b175-2d9ad1d5ed37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://47.212.193.38:46802/bin.sh",
      "pattern": "[url:value = 'http://47.212.193.38:46802/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:33:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884612/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a27dc35-943d-5626-b2b8-9bda55d8d72d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.135:45948/i",
      "pattern": "[url:value = 'http://200.112.129.135:45948/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884611/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a867022c-5638-5da2-bcd4-dcb94bde1969",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.254.156.154:45877/i",
      "pattern": "[url:value = 'http://112.254.156.154:45877/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:16:54Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884610/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb8fd896-1647-51eb-b3cb-3dab01bb572e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ruxi.kernelbridge.top/1ec26b9d-045f-4267-96f8-f01d23727902",
      "pattern": "[url:value = 'https://ruxi.kernelbridge.top/1ec26b9d-045f-4267-96f8-f01d23727902']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884609/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--887d4476-1ab6-55c9-bff8-72c119bc441e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.84.11:46161/bin.sh",
      "pattern": "[url:value = 'http://182.116.84.11:46161/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T20:11:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884608/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16459799-163e-586b-bfc4-759a11df69c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dkkmrjmb.signalfrontier.top/c5d8fa07-c85e-46ce-877d-11e16e3166c1",
      "pattern": "[url:value = 'https://dkkmrjmb.signalfrontier.top/c5d8fa07-c85e-46ce-877d-11e16e3166c1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884607/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e2d4596-f0a0-5e91-8602-10f17885b5fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.64.245:49947/i",
      "pattern": "[url:value = 'http://110.36.64.245:49947/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884606/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28c7b59e-5ac1-5cfe-835c-455718cd8c18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.214.106:36783/i",
      "pattern": "[url:value = 'http://221.15.214.106:36783/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884605/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c413446c-abcd-5492-82ef-2d535d776d57",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.135:45948/bin.sh",
      "pattern": "[url:value = 'http://200.112.129.135:45948/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:31:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884604/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--124a6655-b4d8-5fdd-b4fa-b0308d23e7bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.228.238.42:57406/i",
      "pattern": "[url:value = 'http://42.228.238.42:57406/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884603/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3347367-4321-5611-a858-23307f771f32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.87.90.117:47695/i",
      "pattern": "[url:value = 'http://42.87.90.117:47695/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884602/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e74ce9a-51b6-5528-a4c8-9dcbed650e85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.214.106:36783/bin.sh",
      "pattern": "[url:value = 'http://221.15.214.106:36783/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:15:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884601/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0ce500e-3793-576e-a5b9-4fe4fd0de33f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kmfnh0zd.behtarin-site-shartbandi-football.com/?ublib=7bb49f5f-dfd2-4f75-9973-1ba4d0ab760e",
      "pattern": "[url:value = 'https://kmfnh0zd.behtarin-site-shartbandi-football.com/?ublib=7bb49f5f-dfd2-4f75-9973-1ba4d0ab760e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884600/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18644425-bed5-5913-846f-7966c48d4789",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qfkvyjft.scriptfoundry.top/917292e9-c1da-4922-ac4f-192753d2073b",
      "pattern": "[url:value = 'https://qfkvyjft.scriptfoundry.top/917292e9-c1da-4922-ac4f-192753d2073b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T19:00:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884599/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e207035-3fd6-5df1-9246-4bf64e201a7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.230.68.64:33017/i",
      "pattern": "[url:value = 'http://42.230.68.64:33017/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884598/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--193379bd-8a80-5e3d-a282-41550d37193c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.228.238.42:57406/bin.sh",
      "pattern": "[url:value = 'http://42.228.238.42:57406/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:52:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884597/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc9fe3e1-b167-590e-84ad-4e7f50babace",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.116.56.92:6283/i",
      "pattern": "[url:value = 'http://176.116.56.92:6283/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:37:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884596/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bfa847a-03e4-5523-ae60-9b7fbfa45d70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vgjb.bahsegel90.com/cead6641-a2dc-4153-b82f-1276b71cc19d",
      "pattern": "[url:value = 'https://vgjb.bahsegel90.com/cead6641-a2dc-4153-b82f-1276b71cc19d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:36:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884595/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d08506e-d8a5-5ead-a05b-f168bccabf08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.72.20.62:45114/i",
      "pattern": "[url:value = 'http://110.72.20.62:45114/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:35:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884594/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d4d5cf7-0916-556f-8d0a-1678a78a1aee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://grgsg.onexbet.best/08b88dd5-8e0a-4ada-bb96-47fe34b8ceef",
      "pattern": "[url:value = 'https://grgsg.onexbet.best/08b88dd5-8e0a-4ada-bb96-47fe34b8ceef']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:33:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884593/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0c5f8b0-af84-5071-937e-2ca781c68d4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.180.153.186:52019/i",
      "pattern": "[url:value = 'http://59.180.153.186:52019/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:28:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884592/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc8bb9a6-921a-5d92-abf0-475690f2cd18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.230.68.64:33017/bin.sh",
      "pattern": "[url:value = 'http://42.230.68.64:33017/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884590/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1ce6d7a-b984-572d-9fed-1d1669f69ff3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.139.113.235:51129/i",
      "pattern": "[url:value = 'http://222.139.113.235:51129/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884591/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20e5446e-734b-5dbc-8432-259d0882d27a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.233.38.178:37575/Mozi.a",
      "pattern": "[url:value = 'http://182.233.38.178:37575/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:21:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884589/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f543b140-43a7-58fe-96b9-a7c528743295",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.251.121.142/a3f8d2/adb.sh",
      "pattern": "[url:value = 'http://196.251.121.142/a3f8d2/adb.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884588/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a2fcff3-fd60-5970-884b-e20cd2e4677b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.251.121.142/a3f8d2/kaizen.x86_srv",
      "pattern": "[url:value = 'http://196.251.121.142/a3f8d2/kaizen.x86_srv']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:20:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884586/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--783ed44d-f634-57a4-bdb8-5ee31855dcda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.251.121.142/a3f8d2/dlink.sh",
      "pattern": "[url:value = 'http://196.251.121.142/a3f8d2/dlink.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:20:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884587/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ae0a1b9-fa21-5776-bb3f-d966de8cfd26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jc5eb1c5.radioshartbandi.chat/?ublib=8bdf88e5-66f9-497b-9e67-94548701997b",
      "pattern": "[url:value = 'https://jc5eb1c5.radioshartbandi.chat/?ublib=8bdf88e5-66f9-497b-9e67-94548701997b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884585/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d5b9ec7-cd90-556a-a33a-e30e81815405",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.116.56.92:6283/bin.sh",
      "pattern": "[url:value = 'http://176.116.56.92:6283/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:11:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884584/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea4ac139-dff3-5b98-b61f-8ab786f3bf89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.139.113.235:51129/bin.sh",
      "pattern": "[url:value = 'http://222.139.113.235:51129/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:06:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884583/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d309e4e1-d17e-54fa-bcca-462c7dac6ac6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hyh08ykm.packetmeridian.top/?ublib=91087a5b-93c2-4691-b8d1-4cae60e5e455",
      "pattern": "[url:value = 'https://hyh08ykm.packetmeridian.top/?ublib=91087a5b-93c2-4691-b8d1-4cae60e5e455']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884582/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ee15ee1-1a23-55af-8aaa-7d832d5f6b33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.180.153.186:52019/bin.sh",
      "pattern": "[url:value = 'http://59.180.153.186:52019/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:01:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884581/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71422484-7768-557e-9600-6ae2e3416980",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mfrsnkup.radioshartbandi.bet/b68e5112-bbc5-405d-9f3e-0ad3d3878a29",
      "pattern": "[url:value = 'https://mfrsnkup.radioshartbandi.bet/b68e5112-bbc5-405d-9f3e-0ad3d3878a29']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T18:01:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884580/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02a85c0f-9579-535b-91f1-bc30c1f9009d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.72.20.62:45114/bin.sh",
      "pattern": "[url:value = 'http://110.72.20.62:45114/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884579/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6ae2f7a-c36e-5c73-8676-287f153b7ff5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/arm",
      "pattern": "[url:value = 'http://103.130.215.73/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884574/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c86cf58-eafc-5434-b0d8-92363a76d02b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/x86_64",
      "pattern": "[url:value = 'http://103.130.215.73/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884575/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33ea9661-8c74-5337-83f4-722058d91cbc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/arm6",
      "pattern": "[url:value = 'http://103.130.215.73/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884576/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11776c64-398e-5df6-961a-81de9b1d41f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/arm5",
      "pattern": "[url:value = 'http://103.130.215.73/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884577/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9357e484-7c19-5d39-9081-65e68c4e90ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73///arm5",
      "pattern": "[url:value = 'http://103.130.215.73///arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884578/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--048be522-cc4a-5300-9ec3-274c8e2e6d8b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/mips",
      "pattern": "[url:value = 'http://103.130.215.73/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:55:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884571/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3053f738-28ac-5c00-bcea-729889ba5a40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/mipsel",
      "pattern": "[url:value = 'http://103.130.215.73/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:55:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884572/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--764067c2-0098-575e-97a5-a358998d1f4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.130.215.73/arm7",
      "pattern": "[url:value = 'http://103.130.215.73/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:55:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884573/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--162eca07-b6e2-5475-8e92-a15c61d1936f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vxfo.bahigo.casino/54524aab-8509-4eae-addf-a9256cb47944",
      "pattern": "[url:value = 'https://vxfo.bahigo.casino/54524aab-8509-4eae-addf-a9256cb47944']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:35:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884570/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3307fa64-3ca7-5a1b-a9ae-998a46ec8a00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.194.37.2:55595/bin.sh",
      "pattern": "[url:value = 'http://115.194.37.2:55595/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:33:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884569/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8ddde50-eb52-56a8-9c27-edec7088464c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://79.106.74.167:42214/i",
      "pattern": "[url:value = 'http://79.106.74.167:42214/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:31:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884568/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca7ba64e-7554-555e-a261-0695ed7bf602",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.4.189.98:48149/i",
      "pattern": "[url:value = 'http://123.4.189.98:48149/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884567/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--142d324a-c413-54d3-a46a-f3f7a6c04a69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.235.149.26:59631/i",
      "pattern": "[url:value = 'http://42.235.149.26:59631/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:21:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884566/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c1bc10-0066-5be8-81e3-cd2c0314a072",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://s8p4n4bz.behtarin-site-shartbandi-football.bet/?ublib=c9fcf2f5-44be-4166-bf17-f2149fcc3bbf",
      "pattern": "[url:value = 'https://s8p4n4bz.behtarin-site-shartbandi-football.bet/?ublib=c9fcf2f5-44be-4166-bf17-f2149fcc3bbf']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:16:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884565/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--406b9875-a833-5bf9-ab98-78af3b230d48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://79.106.74.167:42214/bin.sh",
      "pattern": "[url:value = 'http://79.106.74.167:42214/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884564/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ccdbc95-b285-5186-bf07-4f0cbd8e2da3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.88.168:37199/i",
      "pattern": "[url:value = 'http://42.231.88.168:37199/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884563/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcf20b86-d933-572a-96a0-39288322c201",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://glwpjrqq.bcgame.shop/da04f9c7-e1e4-4196-a4a7-49510567dabe",
      "pattern": "[url:value = 'https://glwpjrqq.bcgame.shop/da04f9c7-e1e4-4196-a4a7-49510567dabe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T17:01:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884562/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8ee029e-990b-5d4f-9fd4-5095886ebf4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jtkeavok.bcgame.shop/1b43e959-4d8d-4312-8e83-7e107607c398",
      "pattern": "[url:value = 'https://jtkeavok.bcgame.shop/1b43e959-4d8d-4312-8e83-7e107607c398']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:49:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884561/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c3aa9fa-dacd-541b-bc06-519c22475a59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.245.101:40314/bin.sh",
      "pattern": "[url:value = 'http://182.126.245.101:40314/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:41:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884560/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d1c360b-b7e9-559d-8e4d-af75df1a65ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://snmg.bahigo90bet.com/5150d462-6881-4c3f-953e-94895e7dff03",
      "pattern": "[url:value = 'https://snmg.bahigo90bet.com/5150d462-6881-4c3f-953e-94895e7dff03']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:33:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884559/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61dfeb84-cb6f-5ec3-8085-364c9a1725a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://46.45.24.187:60415/i",
      "pattern": "[url:value = 'http://46.45.24.187:60415/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:31:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884558/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3b916d3-1cfa-53ba-b3bf-8e8711c44764",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ertt.bahigo90bet.com/05354918-f162-4eeb-ba90-e8de5fb6c985",
      "pattern": "[url:value = 'https://ertt.bahigo90bet.com/05354918-f162-4eeb-ba90-e8de5fb6c985']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:29:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884557/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e1fbec1-ea5a-560b-bb59-a7d7656c3859",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.200.110:32910/i",
      "pattern": "[url:value = 'http://120.28.200.110:32910/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:12:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884556/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bacfd80-c510-5d50-8577-2577b328a2e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://46.45.24.187:60415/bin.sh",
      "pattern": "[url:value = 'http://46.45.24.187:60415/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884555/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d491e12-0d37-5b44-a23f-d09b2d5b08a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.115.222.169:52901/i",
      "pattern": "[url:value = 'http://119.115.222.169:52901/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T16:02:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884554/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d0a6c0d-31e7-58b5-b7c2-764c7f0cacc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.39.237.192:41559/i",
      "pattern": "[url:value = 'http://110.39.237.192:41559/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:59:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884553/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7567de5-f9d9-5bfc-acca-73c1259639d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.202.67.32:41461/i",
      "pattern": "[url:value = 'http://220.202.67.32:41461/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:50:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884552/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9218a223-a4dc-5b22-b58c-5464726d2e4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.12.61:52297/bin.sh",
      "pattern": "[url:value = 'http://110.36.12.61:52297/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:48:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884551/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faafb41e-bd23-5643-bed4-ba6bd222f6a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.115.222.169:52901/bin.sh",
      "pattern": "[url:value = 'http://119.115.222.169:52901/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:47:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884549/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e9d9aca-e691-5a1e-92ce-9d4a957eed57",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.87.152.70:41357/bin.sh",
      "pattern": "[url:value = 'http://42.87.152.70:41357/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:47:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884550/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0b961ca-27a3-52c8-90af-7f40f689187d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.200.110:32910/bin.sh",
      "pattern": "[url:value = 'http://120.28.200.110:32910/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884548/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dccc789-69bd-5222-a95b-2abbacfd531a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.154.159:35456/i",
      "pattern": "[url:value = 'http://42.239.154.159:35456/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:41:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884547/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ae1b12a-1e2e-5819-b555-39e36eed947b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.119.253:35178/i",
      "pattern": "[url:value = 'http://115.61.119.253:35178/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884546/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a8895d9-d276-548b-bfa5-f3e2a6e1dd34",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.202.67.32:41461/bin.sh",
      "pattern": "[url:value = 'http://220.202.67.32:41461/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:31:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884545/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49be42cd-9cfc-57a6-8703-3f2837338a33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.138.224:40577/i",
      "pattern": "[url:value = 'http://59.96.138.224:40577/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:31:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884544/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74f32c66-c25e-5cfe-b52f-7a6c63fc785f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://awvz.backgammon.download/dafd8919-d9f8-4b8a-a841-8b79f9f62e29",
      "pattern": "[url:value = 'https://awvz.backgammon.download/dafd8919-d9f8-4b8a-a841-8b79f9f62e29']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884543/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b21b5bbb-2e2e-5a4c-bcf0-0484805e2eb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.65.148.194/hiddenbin/boatnet.arm",
      "pattern": "[url:value = 'http://176.65.148.194/hiddenbin/boatnet.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:28:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884541/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--374758e1-9931-52fe-9cea-f6febbe79c31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.65.148.194/hiddenbin/boatnet.ppc",
      "pattern": "[url:value = 'http://176.65.148.194/hiddenbin/boatnet.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:28:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884542/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb0a92f9-2d38-5dc0-8872-3ebd51037e58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.65.148.194/hiddenbin/boatnet.arm6",
      "pattern": "[url:value = 'http://176.65.148.194/hiddenbin/boatnet.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884540/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ee92ecc-97ab-538f-9296-af47e0549af4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.65.148.194/hiddenbin/boatnet.arc",
      "pattern": "[url:value = 'http://176.65.148.194/hiddenbin/boatnet.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884538/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ec8846d-8695-5eae-8e9f-c444de56679d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.65.148.194/hiddenbin/boatnet.spc",
      "pattern": "[url:value = 'http://176.65.148.194/hiddenbin/boatnet.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884539/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1c84af1-374c-560f-aa98-74f539dfbaf1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.227.177.147:33531/i",
      "pattern": "[url:value = 'http://42.227.177.147:33531/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:25:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884537/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--816d38ce-dc2d-5b0d-b0d9-41407dd00ed0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.138.224:40577/bin.sh",
      "pattern": "[url:value = 'http://59.96.138.224:40577/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:22:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884536/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00461504-cfbe-5ffb-bc6f-bb7df736e591",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.72.176:34841/i",
      "pattern": "[url:value = 'http://110.37.72.176:34841/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:15:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884535/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1863c228-7b66-5da8-b9ea-d292a7fac2fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://u1n70yhl.behtarin-site-shartbandi.com/?ublib=37b2752a-c838-4363-a9c6-eca106488424",
      "pattern": "[url:value = 'https://u1n70yhl.behtarin-site-shartbandi.com/?ublib=37b2752a-c838-4363-a9c6-eca106488424']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T15:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884534/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7742ff43-7ca4-5e50-86b0-3d7e7b43b4c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.244.136.230:33171/bin.sh",
      "pattern": "[url:value = 'http://112.244.136.230:33171/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884533/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62c4ecb8-7bfc-58d0-9ae4-bdb7af8de212",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.244.136.230:33171/i",
      "pattern": "[url:value = 'http://112.244.136.230:33171/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884532/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1ad4fbc-0ffe-5be2-ac15-5901a78f8620",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.180.134.44:59174/i",
      "pattern": "[url:value = 'http://59.180.134.44:59174/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884531/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--440d6643-89fc-57d8-957b-6285216dc053",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.188.79.78:45414/i",
      "pattern": "[url:value = 'http://123.188.79.78:45414/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884530/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--127ba13c-4737-50e6-8ab4-a05d68d473b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.57.166.32:58178/i",
      "pattern": "[url:value = 'http://115.57.166.32:58178/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884529/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4846f255-6d53-55f2-8818-23ce8ff3138e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.54.253.200:50374/i",
      "pattern": "[url:value = 'http://61.54.253.200:50374/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884528/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cc8fecf-522c-5b17-9c6c-487749a6488d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.193.51:58246/i",
      "pattern": "[url:value = 'http://115.49.193.51:58246/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884525/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0f34e4c-df71-517d-93a3-798ee22353fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dawn-mud-d34f.phzinhoooo.workers.dev/J0YH-KEUX-J9ID-2I7M/img_vfui65.png",
      "pattern": "[url:value = 'https://dawn-mud-d34f.phzinhoooo.workers.dev/J0YH-KEUX-J9ID-2I7M/img_vfui65.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884526/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e025bee-837c-59a3-b5be-dd7223e1204c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.37.190:60685/i",
      "pattern": "[url:value = 'http://123.11.37.190:60685/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884527/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9374ce85-3b24-5795-a75c-f54c3608931f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.86.0:37487/i",
      "pattern": "[url:value = 'http://110.36.86.0:37487/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884521/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4563aa0-a89b-5127-b00d-596136e6d865",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.136.23.106:45812/i",
      "pattern": "[url:value = 'http://222.136.23.106:45812/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884522/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fe0c082-3f21-598e-ad5d-90d8d39e26b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.37.190:60685/bin.sh",
      "pattern": "[url:value = 'http://123.11.37.190:60685/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884523/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62ce6562-38bc-5645-b0b0-2aa2784f365b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.125.166:51311/bin.sh",
      "pattern": "[url:value = 'http://27.215.125.166:51311/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884524/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb167f66-ae1a-5609-8b62-809d32884753",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://q6972jc6.powershart.com/?ublib=5f819f55-95da-4d2a-9fad-ace0fc9f2e03",
      "pattern": "[url:value = 'https://q6972jc6.powershart.com/?ublib=5f819f55-95da-4d2a-9fad-ace0fc9f2e03']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884518/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--347ac58a-96d6-5ca1-8f35-80f98f2b5539",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xz1aa7xc.royalshart.bet/?ublib=636ccea6-302b-4b84-8d90-8f1b14893cf9",
      "pattern": "[url:value = 'https://xz1aa7xc.royalshart.bet/?ublib=636ccea6-302b-4b84-8d90-8f1b14893cf9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884519/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5eab457-d05b-5dbc-8e7c-b92b40b51322",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://oj7f87i3.radioshartbandi.casino/?ublib=9c525f8c-b37f-4761-9e2e-24341614a7fe",
      "pattern": "[url:value = 'https://oj7f87i3.radioshartbandi.casino/?ublib=9c525f8c-b37f-4761-9e2e-24341614a7fe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884520/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20473c3b-cb49-54d4-a5c0-277af3f2f53b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.125.166:51311/i",
      "pattern": "[url:value = 'http://27.215.125.166:51311/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884517/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--750c8bd5-b2a1-5550-af51-b59c7cd9a3f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nnxhoedm.onjabet1.com/94b36fe0-a706-4271-96c2-1768bf16a54f",
      "pattern": "[url:value = 'https://nnxhoedm.onjabet1.com/94b36fe0-a706-4271-96c2-1768bf16a54f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884516/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8667478a-1c04-526b-9f55-f4060bc6f53b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://adbjginw.bet90forward.win/9c46f044-4b7e-42e9-af1c-c35f5808ab58",
      "pattern": "[url:value = 'https://adbjginw.bet90forward.win/9c46f044-4b7e-42e9-af1c-c35f5808ab58']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884511/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dbd5af3-9b31-530d-897c-5e02a63c5ff6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_8c074aa042a45b9e.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_8c074aa042a45b9e.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884512/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19078291-dccc-5fe3-b928-5073e4c8d06b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_001f160414df7d98.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_001f160414df7d98.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884513/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cb03786-7685-5a08-adc2-b57e0fd8ff39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_bb60b9785e50aefa.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_bb60b9785e50aefa.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884514/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a126ff0-2cc0-5c84-afe1-16679d211d41",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dzij.alevcasino.bet/f8d09ac4-e37d-4ec4-885b-78e0906ac400",
      "pattern": "[url:value = 'https://dzij.alevcasino.bet/f8d09ac4-e37d-4ec4-885b-78e0906ac400']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T14:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884515/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--217245fa-b9b9-5c90-87ac-0b7599bf7242",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.91.33:48724/i",
      "pattern": "[url:value = 'http://110.36.91.33:48724/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884510/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2124606f-137e-50be-9351-390ff8ea7ea9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ujniklzz.radioshartbandi.bet/f354d8d2-e027-4871-9f4b-6e3089d1530f",
      "pattern": "[url:value = 'https://ujniklzz.radioshartbandi.bet/f354d8d2-e027-4871-9f4b-6e3089d1530f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884509/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fea3f78-204e-54a1-b66d-bedd50b7450e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.121:59253/i",
      "pattern": "[url:value = 'http://200.112.129.121:59253/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884508/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5fc062a-5ace-5c18-bbdb-f3e4da5cbf1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.136.23.106:45812/bin.sh",
      "pattern": "[url:value = 'http://222.136.23.106:45812/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:34:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884507/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d22869f-b1c9-5064-a48a-5257e74ecfad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.99.164:43603/bin.sh",
      "pattern": "[url:value = 'http://182.126.99.164:43603/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884506/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbd4a97a-922c-59bc-a258-405d1e1d6274",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.91.33:48724/bin.sh",
      "pattern": "[url:value = 'http://110.36.91.33:48724/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884505/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5179299c-d19f-57d1-82d4-f95654a5a99d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nfvh.1pishbini.com/e9663846-3613-4376-9a47-fc06bc0f82a7",
      "pattern": "[url:value = 'https://nfvh.1pishbini.com/e9663846-3613-4376-9a47-fc06bc0f82a7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:26:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884504/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0eebef1-099c-5961-b136-7b46ff18f2a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.3.122.78:42109/bin.sh",
      "pattern": "[url:value = 'http://221.3.122.78:42109/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:15:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884503/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0281133-450e-59b9-a21e-feb97a6a561f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.85.38:51752/i",
      "pattern": "[url:value = 'http://222.137.85.38:51752/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884502/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c572362-e270-50ad-853b-b2f8dfdd6da7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bizec8bu.zaribbala.bet/?ublib=d55ff9a7-33b6-4853-8483-aac95334d90b",
      "pattern": "[url:value = 'https://bizec8bu.zaribbala.bet/?ublib=d55ff9a7-33b6-4853-8483-aac95334d90b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:06:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884501/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f33fd5d8-5d20-5c17-a9c7-d4f469035877",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ohnymfxm.btyek.cloud/3e65b427-fe87-41a8-82dd-be0223028bf9",
      "pattern": "[url:value = 'https://ohnymfxm.btyek.cloud/3e65b427-fe87-41a8-82dd-be0223028bf9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T11:01:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884500/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--778fa807-4cb9-57e7-b1a0-5e96338f1467",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://eosgdskc.btyek.site/b8deeedb-13e5-44fa-875a-ad24d72d16db",
      "pattern": "[url:value = 'https://eosgdskc.btyek.site/b8deeedb-13e5-44fa-875a-ad24d72d16db']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T10:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884499/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47f53471-b105-5615-a14e-1e81ca050dce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.85.38:51752/bin.sh",
      "pattern": "[url:value = 'http://222.137.85.38:51752/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T10:49:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884498/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65e229ce-3eaf-55cb-aab5-c16f62f61033",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.140/files/7044575709/brti8Vz.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/7044575709/brti8Vz.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T10:49:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884497/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae801ac3-5a55-5366-b523-5fd8fc0020c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.31.103.204:46574/i",
      "pattern": "[url:value = 'http://103.31.103.204:46574/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T09:51:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884496/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a7dbc91-6c19-5ee8-bd41-6e0adde1d453",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.160.131.186:42169/i",
      "pattern": "[url:value = 'http://125.160.131.186:42169/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T09:02:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884495/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47d0283e-c013-58ff-ac9d-84ac2699312f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.5.138.3:59029/bin.sh",
      "pattern": "[url:value = 'http://45.5.138.3:59029/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-10T06:04:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884494/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c49afdd9-99c6-55d7-a480-1dde0d704342",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.187.33.138:33631/i",
      "pattern": "[url:value = 'http://105.187.33.138:33631/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T22:08:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884493/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8feabce5-b5c9-5844-8277-606869c0eb71",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.123.211.0:55917/i",
      "pattern": "[url:value = 'http://182.123.211.0:55917/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T22:07:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884492/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58b0b6d2-628b-5558-a779-b6b3dfadb932",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.187.33.138:33631/bin.sh",
      "pattern": "[url:value = 'http://105.187.33.138:33631/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T22:06:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884491/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b32ecb05-8cb8-591c-b6b9-801ddbda6bdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.195.212.157:57971/i",
      "pattern": "[url:value = 'http://115.195.212.157:57971/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T22:03:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884490/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93eba84d-1855-58b5-a801-059f15de7fde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.23.22:54815/i",
      "pattern": "[url:value = 'http://222.137.23.22:54815/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T22:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884489/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6e6eb81-3f8d-593d-9643-0e4b99dd7886",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://yyyvzlgy.irantop.bet/bc48269c-0aba-4ad6-b8c0-bbeccdf8d6a8",
      "pattern": "[url:value = 'https://yyyvzlgy.irantop.bet/bc48269c-0aba-4ad6-b8c0-bbeccdf8d6a8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:49:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884488/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fa7dd6e-e6b5-5d83-a208-a32a793ca3e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.123.211.0:55917/bin.sh",
      "pattern": "[url:value = 'http://182.123.211.0:55917/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:39:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884487/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1657e28e-7928-50de-ba91-bf3a773fd749",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.23.22:54815/bin.sh",
      "pattern": "[url:value = 'http://222.137.23.22:54815/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:38:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884486/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4921113e-5418-5845-b136-56f723b3e3b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vblr.barcelona11.com/01ebc1bd-3f01-4b9c-8be4-f43133f90830",
      "pattern": "[url:value = 'https://vblr.barcelona11.com/01ebc1bd-3f01-4b9c-8be4-f43133f90830']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884485/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--669ececb-deb7-5a6e-973f-434127db88a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.226.220.88:59642/i",
      "pattern": "[url:value = 'http://42.226.220.88:59642/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:36:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884484/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c807159-2d22-56fd-9f2d-699eb42228f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ggittwjb.irantop.bet/7dbe829f-08c8-41df-972c-dd2e4a9e97d1",
      "pattern": "[url:value = 'https://ggittwjb.irantop.bet/7dbe829f-08c8-41df-972c-dd2e4a9e97d1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884483/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36ab89f2-c174-5783-b75a-4a75edaaf045",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.255.206:40693/i",
      "pattern": "[url:value = 'http://112.248.255.206:40693/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:31:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884482/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47bb6a2f-e484-5038-8681-db77b0519505",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://nkzajnx4.pablobet.bet/?ublib=5637b900-931b-44bf-b25e-47943c2785fa",
      "pattern": "[url:value = 'https://nkzajnx4.pablobet.bet/?ublib=5637b900-931b-44bf-b25e-47943c2785fa']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:31:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884481/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53acb7df-1afc-5b95-9cf5-4cd3909dbe1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.195.212.157:57971/bin.sh",
      "pattern": "[url:value = 'http://115.195.212.157:57971/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:27:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884480/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9554e2c2-a057-583a-afb3-7e030db48c42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.64.9.139:43526/bin.sh",
      "pattern": "[url:value = 'http://39.64.9.139:43526/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:27:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884479/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a71093f-cc13-5f8a-b5b4-4b4f7fc58295",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://4x9zxbge.ritzo1bet.com/?ublib=b48a14b5-9d78-462b-896e-b28288be4bab",
      "pattern": "[url:value = 'https://4x9zxbge.ritzo1bet.com/?ublib=b48a14b5-9d78-462b-896e-b28288be4bab']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:15:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884478/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ad78582-0904-53b4-bb1e-32c6e517f19f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.115.74.126:34759/bin.sh",
      "pattern": "[url:value = 'http://182.115.74.126:34759/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T21:00:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884477/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--861012fb-00fa-5065-bb9e-efeddc5a72c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.237.59.190:37182/bin.sh",
      "pattern": "[url:value = 'http://42.237.59.190:37182/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:58:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884476/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecc3ddbe-5245-59d9-af54-da8abe864937",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.41.7.156:54523/i",
      "pattern": "[url:value = 'http://125.41.7.156:54523/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884475/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4013f4ca-dd4c-57b4-a0f8-9eaf9e6d250d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.172.186.195:45747/i",
      "pattern": "[url:value = 'http://103.172.186.195:45747/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:41:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884474/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0212f16a-0bfa-5b7d-b989-b72dbe5bcba8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://auai.bet90forward.win/c18b38dc-e123-4a1f-abd8-2d0903de7a78",
      "pattern": "[url:value = 'https://auai.bet90forward.win/c18b38dc-e123-4a1f-abd8-2d0903de7a78']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:37:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884473/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3c49f80-449b-54e2-9f2b-e4dcde847b60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://knyjwxkg.fileboroo.com/ac648a26-b5a2-407d-892f-8797fbe98669",
      "pattern": "[url:value = 'https://knyjwxkg.fileboroo.com/ac648a26-b5a2-407d-892f-8797fbe98669']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:35:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884472/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37af55bb-dedb-5258-b16c-1e7cd447a159",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.127.151:60783/bin.sh",
      "pattern": "[url:value = 'http://27.215.127.151:60783/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:33:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884470/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0af0114-c51e-5fb5-aba8-37e5f68780ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.253.62.162:59112/i",
      "pattern": "[url:value = 'http://117.253.62.162:59112/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:33:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884471/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7b1ce0c-eab1-5164-9cee-0a0c8194b858",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.199.160:48900/i",
      "pattern": "[url:value = 'http://115.55.199.160:48900/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:28:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884469/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa208059-b69c-5954-af14-593adf68026f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://84.22.221.124:4908/bin.sh",
      "pattern": "[url:value = 'http://84.22.221.124:4908/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884468/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2ee3d55-4ada-526f-b76e-fdf1e5e99e78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.41.7.156:54523/bin.sh",
      "pattern": "[url:value = 'http://125.41.7.156:54523/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:26:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884467/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95574a7e-9625-5661-9387-71f778ed4df3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.59.63:52041/bin.sh",
      "pattern": "[url:value = 'http://115.55.59.63:52041/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T20:16:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884466/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fa07744-faf2-5bfa-a422-3a5c802794f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.186.220.123:43043/bin.sh",
      "pattern": "[url:value = 'http://105.186.220.123:43043/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:59:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884465/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4af3c9d-e82a-5ef4-a23d-984dda81ce59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.154.173.110:60949/i",
      "pattern": "[url:value = 'http://219.154.173.110:60949/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:55:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884464/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e6e70d8-e729-5dba-b999-ae232bd29cdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://124.131.186.170:45557/i",
      "pattern": "[url:value = 'http://124.131.186.170:45557/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:54:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884463/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccb595e1-634c-5f60-9cc2-f40ad9b10a39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.253.62.162:59112/bin.sh",
      "pattern": "[url:value = 'http://117.253.62.162:59112/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:53:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884462/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef153543-7ad6-556b-a5db-e462830ec932",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.154.173.110:60949/bin.sh",
      "pattern": "[url:value = 'http://219.154.173.110:60949/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:49:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884461/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b8a80a1-8595-5294-a0fc-25b5b0f2de16",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.148.152.255:48925/bin.sh",
      "pattern": "[url:value = 'http://175.148.152.255:48925/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:41:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884460/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a7f74af-f41a-5bac-8c9f-9905148d3ac4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.14.97.112:60013/i",
      "pattern": "[url:value = 'http://119.14.97.112:60013/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:37:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884459/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa238a72-4b09-593b-af3f-7ad1d849c8ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://oksz.ozabet.casino/d0adcef9-17dd-4138-9a6e-85ad1f7ea521",
      "pattern": "[url:value = 'https://oksz.ozabet.casino/d0adcef9-17dd-4138-9a6e-85ad1f7ea521']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:36:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884458/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d69a2cd-b171-5aab-9e1f-2dcf8d6838a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sfzfzyeb.btyek.site/8ec55314-201a-4593-9304-a4fa20e0d6d5",
      "pattern": "[url:value = 'https://sfzfzyeb.btyek.site/8ec55314-201a-4593-9304-a4fa20e0d6d5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884457/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8624a9bc-64f0-5efb-85f6-747df6af2bfe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.109.212.35:35093/i",
      "pattern": "[url:value = 'http://119.109.212.35:35093/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:29:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884456/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eca07a45-4e13-5f54-abd3-e5cd5f3e9bff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gifqd3gd.mahbet.poker/?ublib=10aa7268-6b48-4f15-8a62-0b3075ed3033",
      "pattern": "[url:value = 'https://gifqd3gd.mahbet.poker/?ublib=10aa7268-6b48-4f15-8a62-0b3075ed3033']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884455/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6f69464-3551-5bb6-b4d2-24e0134706b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://odng6v0p.rewardbet.bet/?ublib=f93608e1-9b89-4b9f-b2d3-26cc21e58cbe",
      "pattern": "[url:value = 'https://odng6v0p.rewardbet.bet/?ublib=f93608e1-9b89-4b9f-b2d3-26cc21e58cbe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884454/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62bd332b-4664-575e-bb59-a9796bf68cdd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.251.121.142/a3f8d2/kaizen.arm7sf_srv",
      "pattern": "[url:value = 'http://196.251.121.142/a3f8d2/kaizen.arm7sf_srv']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:07:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884453/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f8621f8-19f6-5fde-8aa5-8a5ad732242a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.251.121.142/a3f8d2/kaizen.x86_64_srv",
      "pattern": "[url:value = 'http://196.251.121.142/a3f8d2/kaizen.x86_64_srv']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:06:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884452/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--298b9570-95fb-5d33-8a8a-a19f7e8adc9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://secure.jokesterblinked.in.net/LICENSES.chromium.dat",
      "pattern": "[url:value = 'https://secure.jokesterblinked.in.net/LICENSES.chromium.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:03:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884451/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--591964d3-d496-59a8-b1de-e4b2a51dd837",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.109.212.35:35093/bin.sh",
      "pattern": "[url:value = 'http://119.109.212.35:35093/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T19:02:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884450/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--991cdc31-0d67-5988-a2e6-a2b06c7f4e22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.80.218:60746/i",
      "pattern": "[url:value = 'http://182.126.80.218:60746/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:48:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884449/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01fa5cdc-bb8b-5b92-94da-b2f8b1b6b38d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://microlsireqjn.com/nvd_driver_dll.exe",
      "pattern": "[url:value = 'https://microlsireqjn.com/nvd_driver_dll.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:48:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884448/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49b88c47-92b5-5d28-938a-84a8862dab83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.179.32:43009/i",
      "pattern": "[url:value = 'http://27.215.179.32:43009/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:44:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884447/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4575454-1188-51ef-a1da-8da237a7efc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.253/tharsky/rev.bat",
      "pattern": "[url:value = 'http://217.60.195.253/tharsky/rev.bat']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:43:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884446/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a07e438-3e51-52d0-a06f-15b18dde4d40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://156.226.174.98/bins.sh",
      "pattern": "[url:value = 'http://156.226.174.98/bins.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:43:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884445/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe1da16e-4591-5318-8b61-9d725e51be94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.253/tharsky/TharY.bat",
      "pattern": "[url:value = 'http://217.60.195.253/tharsky/TharY.bat']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884444/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4789148-8848-5f15-8909-d43c503945df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.253/tharsky/swag.exe",
      "pattern": "[url:value = 'http://217.60.195.253/tharsky/swag.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884442/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8f37e6c-339c-55f4-bb6e-a1f2f27a0562",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://217.60.195.253/tharsky/Y.exe",
      "pattern": "[url:value = 'http://217.60.195.253/tharsky/Y.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884443/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b46fe5aa-2a84-5d49-8bef-dcc6edf76d0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ppdp.oza.bet/38ead192-d353-45ff-a9e4-5861359fbbf1",
      "pattern": "[url:value = 'https://ppdp.oza.bet/38ead192-d353-45ff-a9e4-5861359fbbf1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884441/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf501238-3cb9-5993-97c7-9f6f2b1682b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://khlko.gorgbet.net/54dba6b6-7238-4b4b-bc1e-afa8b6e2a74d",
      "pattern": "[url:value = 'https://khlko.gorgbet.net/54dba6b6-7238-4b4b-bc1e-afa8b6e2a74d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:36:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884440/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93b0dbe6-a6ad-554d-b199-d9fd099f7319",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.117.9.51:48515/i",
      "pattern": "[url:value = 'http://182.117.9.51:48515/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:26:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884439/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a07ebc1-44e2-5bd7-846e-44294e67a948",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.148.154.150:51716/i",
      "pattern": "[url:value = 'http://175.148.154.150:51716/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:26:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884438/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff78154c-f16f-5849-a339-5c8fa3730cc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kesyothd.irantop.bet/cfdcf039-68be-45b0-a254-55164b22d741",
      "pattern": "[url:value = 'https://kesyothd.irantop.bet/cfdcf039-68be-45b0-a254-55164b22d741']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884437/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80b5cd71-a6d8-5b47-a4f6-7a096b889246",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/goahead",
      "pattern": "[url:value = 'http://45.90.163.37/goahead']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884436/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0140970-5417-54fc-87e2-0cffe131f9b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://111.179.159.2:52029/bin.sh",
      "pattern": "[url:value = 'http://111.179.159.2:52029/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:14:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884435/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fb93296-fbc2-5600-b477-d2785d423c37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.179.32:43009/bin.sh",
      "pattern": "[url:value = 'http://27.215.179.32:43009/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:14:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884434/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f1aafce-b494-512b-a7bf-a8cc314d55a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://156.146.26.225:48881/i",
      "pattern": "[url:value = 'http://156.146.26.225:48881/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:05:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884433/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ca59227-ffe1-53be-adc7-9b958fc23f1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.117.9.51:48515/bin.sh",
      "pattern": "[url:value = 'http://182.117.9.51:48515/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T18:01:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884432/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a567c9d7-ca3e-512b-8246-049280322904",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.140/files/7559850987/c40Txww.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/7559850987/c40Txww.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884431/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3de90c4-b5b1-59a4-b040-af217c522b6d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vbhm.one1winbet.com/423cd298-6007-4daf-bbdb-b3aea234afe6",
      "pattern": "[url:value = 'https://vbhm.one1winbet.com/423cd298-6007-4daf-bbdb-b3aea234afe6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:36:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884430/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7425c291-6551-57ea-a5f7-424d9a49072c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.187.3:44799/i",
      "pattern": "[url:value = 'http://123.5.187.3:44799/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:23:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884429/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68aaa6d5-e41f-59d7-aecf-6e1fb4b99c80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.47.238.167:35702/i",
      "pattern": "[url:value = 'http://125.47.238.167:35702/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884428/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c1ccdc2-e244-5d2b-92ad-f362b41b92ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://caewscad.fileboroo.com/d594c87b-519d-4f61-acb4-d5b6f782d055",
      "pattern": "[url:value = 'https://caewscad.fileboroo.com/d594c87b-519d-4f61-acb4-d5b6f782d055']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:21:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884427/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c821217f-16c8-57d4-9b73-13a0a4001ed3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://p8rzf42g.radmanwear.ir/?ublib=cf6065f4-a18d-485c-ad71-b04797080b3a",
      "pattern": "[url:value = 'https://p8rzf42g.radmanwear.ir/?ublib=cf6065f4-a18d-485c-ad71-b04797080b3a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884426/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb256c44-4c65-54f6-9253-1f6bd50bc794",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/i686",
      "pattern": "[url:value = 'http://141.11.88.120/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884424/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e9dcf6b-862a-5365-8b10-1526116042cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/mips",
      "pattern": "[url:value = 'http://141.11.88.120/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884425/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88d3519c-4402-5404-84e8-7f956a1027d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/run.sh",
      "pattern": "[url:value = 'http://141.11.88.120/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884419/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b29db3f-1a88-5327-ba83-650004d3dad9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/mipsel",
      "pattern": "[url:value = 'http://141.11.88.120/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884420/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2ea7aff-ce9b-55ca-b107-d4a7ff402c5e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/x86",
      "pattern": "[url:value = 'http://141.11.88.120/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884421/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b516059-fd5f-594d-b48a-59df9fff5567",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/ppc64",
      "pattern": "[url:value = 'http://141.11.88.120/ppc64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884422/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c9105ed-a269-5883-8e95-15e03ee060eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/armv5l",
      "pattern": "[url:value = 'http://141.11.88.120/armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884423/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02cd4868-eefa-5cc4-b7c5-eda65291f61d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/armv7l",
      "pattern": "[url:value = 'http://141.11.88.120/armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884417/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9e53817-4c01-5ed4-a6f0-4c6fd4c2cc39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/armv6l",
      "pattern": "[url:value = 'http://141.11.88.120/armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:09:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884418/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5017426b-e777-58df-a2e7-6ca659ec323f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.110.0:35255/bin.sh",
      "pattern": "[url:value = 'http://112.248.110.0:35255/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:08:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884416/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--632a403d-d6d3-5699-9a54-b82a55412fe0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lynxsecurity.ru:2022/shell.sh",
      "pattern": "[url:value = 'https://lynxsecurity.ru:2022/shell.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:03:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884415/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21ae815b-49e6-514a-b67e-4bffafc09174",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.120/o.xml",
      "pattern": "[url:value = 'http://141.11.88.120/o.xml']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884412/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--391abf76-09ae-5f9f-84d6-15eca124b5af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.100.36.247/Andiod.apk",
      "pattern": "[url:value = 'http://176.100.36.247/Andiod.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884413/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32e76038-fdd3-5069-9c8e-07edae63f29e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://176.100.36.247/Iranbot2.apk",
      "pattern": "[url:value = 'http://176.100.36.247/Iranbot2.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884414/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ea1821f-e97b-58df-9ed1-993d43fba4d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-cgroup",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-cgroup']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T17:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884411/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd4ff78d-ebe5-5086-ad2e-234e85bc66ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.87.30.92:47241/bin.sh",
      "pattern": "[url:value = 'http://39.87.30.92:47241/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:58:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884410/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bf211a5-7075-5c9d-b1bc-5075820e3429",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://160.119.69.4/z/wr.php",
      "pattern": "[url:value = 'http://160.119.69.4/z/wr.php']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884409/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--696ceca4-3502-5429-93c6-c2cc844223d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.95.147.178/z/wr.php",
      "pattern": "[url:value = 'http://45.95.147.178/z/wr.php']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:56:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884408/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--413012ee-85c2-5ce5-82e8-b62facc3274d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.47.238.167:35702/bin.sh",
      "pattern": "[url:value = 'http://125.47.238.167:35702/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:56:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884406/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9d5069a-ca21-57ee-b4f9-aedddcc4b237",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.39.238.29:57124/bin.sh",
      "pattern": "[url:value = 'http://110.39.238.29:57124/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:56:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884407/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33ebde48-0ee6-5952-bb61-5c550a3899d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.12.165.33:57440/i",
      "pattern": "[url:value = 'http://123.12.165.33:57440/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884405/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ddb0278-a7c7-5c68-95e7-363387b79a27",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.39.226.207:38554/bin.sh",
      "pattern": "[url:value = 'http://110.39.226.207:38554/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:38:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884404/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d41388c-e52e-5634-9966-6eb1681b4f47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://undh.ofoghchat.ir/a48c9c88-5484-4b84-8fa5-bf476b8f90ec",
      "pattern": "[url:value = 'https://undh.ofoghchat.ir/a48c9c88-5484-4b84-8fa5-bf476b8f90ec']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:36:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884403/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d987105d-c157-52c3-aea2-4ebcc206d5cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://202.163.107.97:32772/i",
      "pattern": "[url:value = 'http://202.163.107.97:32772/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:26:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884402/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4273652a-1992-5b24-92c3-8776a14d41f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://178.75.62.197:34193/i",
      "pattern": "[url:value = 'http://178.75.62.197:34193/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:26:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884401/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81d7ba89-add8-502a-919d-42b6dc416c38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.12.165.33:57440/bin.sh",
      "pattern": "[url:value = 'http://123.12.165.33:57440/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:22:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884400/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31c8f759-478e-53c7-9356-489e621727f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xaktywhe.btyek.site/2db0231a-ae79-489c-844d-574c663ca318",
      "pattern": "[url:value = 'https://xaktywhe.btyek.site/2db0231a-ae79-489c-844d-574c663ca318']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884399/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93789415-dfa3-57b2-8069-7bfe98893090",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://160.119.69.4/k.php",
      "pattern": "[url:value = 'http://160.119.69.4/k.php']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884398/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9971585e-62cd-5521-a832-2904268cc580",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://218.252.93.200:52226/i",
      "pattern": "[url:value = 'http://218.252.93.200:52226/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884397/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16dc0e71-eda3-569d-9a1f-fb1fe3dcb57e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://www.mediafire.com/file/0cjywwwjfpc9cyy/Minecraft+Dupe+Mod+1.21.11.jar/file",
      "pattern": "[url:value = 'https://www.mediafire.com/file/0cjywwwjfpc9cyy/Minecraft+Dupe+Mod+1.21.11.jar/file']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884396/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4caa58b1-9edf-5272-9616-38cc30840a9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qowmn9c8.iranvibes.ir/?ublib=7d24a14e-4749-4da3-a25f-de818b498f0e",
      "pattern": "[url:value = 'https://qowmn9c8.iranvibes.ir/?ublib=7d24a14e-4749-4da3-a25f-de818b498f0e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:05:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884395/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c9f8ed5-28f6-5844-bed4-e0b2785b113b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://178.75.62.197:34193/bin.sh",
      "pattern": "[url:value = 'http://178.75.62.197:34193/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T16:04:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884394/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a5c399e-52de-5fcc-a0a2-33aae586235a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://www.mediafire.com/file/eihtrow48a6w45p/Matrix_Dupe.jar/file",
      "pattern": "[url:value = 'https://www.mediafire.com/file/eihtrow48a6w45p/Matrix_Dupe.jar/file']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:56:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884393/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b1fb784-220e-513a-bd85-9b5b1a84d60d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.86.113.243:40712/bin.sh",
      "pattern": "[url:value = 'http://42.86.113.243:40712/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:42:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884392/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--225778b3-48a6-54e1-9578-82f90e80c32c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.216.21.87/iop8-agent.exe",
      "pattern": "[url:value = 'http://95.216.21.87/iop8-agent.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:41:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884386/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27e17bae-b35a-5c01-8aa0-9dbb2897ca2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.216.21.87/333.zip",
      "pattern": "[url:value = 'http://95.216.21.87/333.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:41:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884387/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fb339d3-68a1-5187-9683-c7a1428be22c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.216.21.87/scanfff.exe",
      "pattern": "[url:value = 'http://95.216.21.87/scanfff.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:41:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884388/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2045c27-202d-50ae-9375-2bef21caa4f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.216.21.87/buildop.exe",
      "pattern": "[url:value = 'http://95.216.21.87/buildop.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:41:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884389/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51cccda9-6af0-5669-8cae-9d930345f96e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.216.21.87/222.zip",
      "pattern": "[url:value = 'http://95.216.21.87/222.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:41:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884390/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcaac96a-a4e8-5f33-ba22-f790c1f8a650",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.216.21.87/size.exe",
      "pattern": "[url:value = 'http://95.216.21.87/size.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:41:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884391/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e508fd27-c176-54d6-8fca-3e8df2d1eaac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jgtl.novin-gps.ir/d44cc248-598a-48ac-9d5e-7c65b6236b62",
      "pattern": "[url:value = 'https://jgtl.novin-gps.ir/d44cc248-598a-48ac-9d5e-7c65b6236b62']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:39:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884385/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--432664e8-8fb1-5a50-a64a-94d053e9eaca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://178.16.54.12/bin/support.client.exe",
      "pattern": "[url:value = 'https://178.16.54.12/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:33:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884384/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5818414a-aec4-5a75-b0f1-bc1e57517f23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.82.255:42356/i",
      "pattern": "[url:value = 'http://110.37.82.255:42356/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:30:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884383/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d06f05a-3e8d-5584-abdf-f3479afaec2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://iqtpiyvx.rabonabet.casino/4bff366a-847b-44b7-87ea-7c185c244717",
      "pattern": "[url:value = 'https://iqtpiyvx.rabonabet.casino/4bff366a-847b-44b7-87ea-7c185c244717']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884382/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a7ff629-1751-539a-ad29-15734424172f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.74.11:51802/i",
      "pattern": "[url:value = 'http://110.37.74.11:51802/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884381/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffa16afe-c3b1-5436-9d3c-adf6b5a9119e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://5rtckgb9.powershart.com/?ublib=a95aa363-6a05-42dc-bde0-69edbfff7890",
      "pattern": "[url:value = 'https://5rtckgb9.powershart.com/?ublib=a95aa363-6a05-42dc-bde0-69edbfff7890']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:11:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884380/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c2786bd-74f6-5b7f-8344-20178ac6058a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.mpsl",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884379/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--029234af-fb8f-5a56-a0ba-e61118a893cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.x86_64",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884375/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d7fc9c0-438d-540a-a1f0-b6b499814246",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.ppc",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884376/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d185474-820c-5e3d-a03b-7c56b2e32525",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.i686",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884377/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5c5f23e-c56e-521b-b27e-7063ba7e3ead",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.arm",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884378/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e801e140-7419-50f0-9dfe-554e97b18de2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.x86",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884374/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c63e0960-754b-5154-bc13-49fc33dd0e20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.arm5",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884368/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--318c1469-ad2b-57c5-a8b1-e24a56f6c78f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.arc",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884369/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d51e27f-ba63-5fba-a412-0d35963540d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.i468",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.i468']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884370/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec04a55-5ed9-5e6e-9252-ace6b0b24b7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.spc",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884371/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4488d868-7fb2-52b1-b5f7-c276375689ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.m68k",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884372/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76b25592-c8ee-51cd-824e-cbfa640dc99f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.sh4",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884373/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--170e966c-3b1b-5032-926d-a99c34f81b30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.arm7",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884365/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--715d4a8c-4e1b-5547-814a-21c18163af1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.mips",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884366/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51f6b4b5-80a8-56f3-9bb1-eda5ee4cfe90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.198.224.249/void/void.arm6",
      "pattern": "[url:value = 'http://45.198.224.249/void/void.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884367/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c660e740-b7bf-5b67-b84b-a6d84a4821e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://yxjzgcji.proje-negar.ir/1d615043-044f-44ef-abab-007ee0e4d252",
      "pattern": "[url:value = 'https://yxjzgcji.proje-negar.ir/1d615043-044f-44ef-abab-007ee0e4d252']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884364/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36092ac5-1afe-55b1-8d64-688116e07099",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.112.79.205:54539/bin.sh",
      "pattern": "[url:value = 'http://182.112.79.205:54539/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:05:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884363/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bf5b562-51c3-56d5-9f64-c8758274578b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.74.11:51802/bin.sh",
      "pattern": "[url:value = 'http://110.37.74.11:51802/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884362/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51c4d5f5-afea-5794-923c-8e61004e8fda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_8dfbbea67417c631.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_8dfbbea67417c631.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884357/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43d702ab-8ba7-52f1-b3d0-2fd69bb362bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_5feed12220f82b08.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_5feed12220f82b08.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884358/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97da829e-4412-57a8-b4dd-c229cf6a3eb3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_6c8750202691136a.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_6c8750202691136a.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884359/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f78d96d-c533-56f2-a549-a38f3acdbf1d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_41c840ba6585ccfd.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_41c840ba6585ccfd.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884360/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a19169d-aa76-5d07-bc88-ec30c4e5a3ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_1212bb4a7c8e60e3.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_1212bb4a7c8e60e3.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T15:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884361/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b33d146-011b-5584-a002-81b39cde1081",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.71.131.225:58125/i",
      "pattern": "[url:value = 'http://219.71.131.225:58125/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:43:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884356/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--938f59fb-8919-5f64-8ee1-2b7cba9c1b4d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://178.16.54.12/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://178.16.54.12/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:43:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884355/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0f8cbdd-ceeb-5c92-98fd-be17575d931a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://116.76.167.16:35883/i",
      "pattern": "[url:value = 'http://116.76.167.16:35883/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:42:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884354/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0febe69e-7248-5933-ad3a-5ce213c97363",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rlio.catsandcarp.com/dde654cc-0c1b-4513-8ee3-4485b5760fd1",
      "pattern": "[url:value = 'https://rlio.catsandcarp.com/dde654cc-0c1b-4513-8ee3-4485b5760fd1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884353/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff2eedc9-5536-57c5-9ba2-6316ce0efd30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.71.131.225:58125/bin.sh",
      "pattern": "[url:value = 'http://219.71.131.225:58125/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:22:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884352/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebf7217d-09a6-5afe-bbcb-f0f1a47da028",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://3b213f9c.lionsport.ir/?ublib=e285af04-2bb5-4c21-9ef7-8b9cdf68ea1c",
      "pattern": "[url:value = 'https://3b213f9c.lionsport.ir/?ublib=e285af04-2bb5-4c21-9ef7-8b9cdf68ea1c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:22:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884351/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--942f903e-77b3-538e-a6b5-ed4d4493a5ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.1.200:59137/i",
      "pattern": "[url:value = 'http://110.36.1.200:59137/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:17:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884350/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af3eb0d0-08a8-58ca-965c-f74a56ce9f60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.5.247.125:37951/i",
      "pattern": "[url:value = 'http://42.5.247.125:37951/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:13:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884349/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13f1170d-6795-57c7-9dcb-4078d89e7e01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mejpiuio.pokerprado.poker/26a3b111-39c7-43a5-8b91-6a3d2b90577f",
      "pattern": "[url:value = 'https://mejpiuio.pokerprado.poker/26a3b111-39c7-43a5-8b91-6a3d2b90577f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:09:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884348/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1404363f-123b-50a2-a6dc-3b245b9353bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.126.17:51315/i",
      "pattern": "[url:value = 'http://123.14.126.17:51315/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T14:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884347/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b162dfa3-5346-5285-b6c2-f9a033237be8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.1.200:59137/bin.sh",
      "pattern": "[url:value = 'http://110.36.1.200:59137/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:52:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884346/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--290e1c2b-0496-5007-af10-ea2cc8355b88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.191.16:48827/i",
      "pattern": "[url:value = 'http://221.15.191.16:48827/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:45:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884345/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f4bdbff-728a-595a-aeac-d9219121e941",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://todahkuy.podcastshop.ir/fac217bb-7247-4eea-bed8-04ea14b6d7aa",
      "pattern": "[url:value = 'https://todahkuy.podcastshop.ir/fac217bb-7247-4eea-bed8-04ea14b6d7aa']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:43:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884344/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3382708c-e5dd-55c8-8022-fae1f1adf2db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.126.17:51315/bin.sh",
      "pattern": "[url:value = 'http://123.14.126.17:51315/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:40:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884343/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aac48b4-524f-579a-b654-702c8998f95d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.86.12.236:49045/bin.sh",
      "pattern": "[url:value = 'http://39.86.12.236:49045/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:37:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884342/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90ea5482-1d66-5f91-93d3-872219e17bac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.140/files/7559850987/QDeGTBR.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/7559850987/QDeGTBR.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:37:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884341/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15bd2f7a-83ae-5b01-95dc-f0ad6b0e2490",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.113.205.234:33954/bin.sh",
      "pattern": "[url:value = 'http://182.113.205.234:33954/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:32:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884340/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c8c79bd-f3f5-5c05-a2fb-28918017cd8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hpwj.betawarz.com/65720ac0-84a0-49fe-ab45-d738208f918e",
      "pattern": "[url:value = 'https://hpwj.betawarz.com/65720ac0-84a0-49fe-ab45-d738208f918e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884339/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f4dbfc3-465a-53d2-b767-8d77d1468ccb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.114.228.34:48473/i",
      "pattern": "[url:value = 'http://171.114.228.34:48473/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:22:03Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884338/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16d73331-1131-53e3-8a68-2e8a6c00529c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.191.16:48827/bin.sh",
      "pattern": "[url:value = 'http://221.15.191.16:48827/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:18:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884337/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7666fecf-ecee-5eee-9410-03f8046ce55a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hzcsq855.taaghcheirani.com/?ublib=ef9d9073-218d-4a49-8228-a4cf935c1c09",
      "pattern": "[url:value = 'https://hzcsq855.taaghcheirani.com/?ublib=ef9d9073-218d-4a49-8228-a4cf935c1c09']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T13:03:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884336/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9234168-f199-5634-85a0-c2838902415f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.104.230:40878/i",
      "pattern": "[url:value = 'http://61.52.104.230:40878/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:58:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884335/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41681bea-b960-59a9-aea1-1f7d4e015a4d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.9.139.117:35150/i",
      "pattern": "[url:value = 'http://185.9.139.117:35150/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:57:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884334/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b04c867e-08f3-57af-a47b-2e50ce14adaf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.127.246:50700/i",
      "pattern": "[url:value = 'http://123.5.127.246:50700/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:56:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884333/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e710ee74-0edc-589f-a19f-fa6d45b80187",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.157.183:54728/i",
      "pattern": "[url:value = 'http://182.121.157.183:54728/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:53:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884332/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--935dc85d-57a6-5f10-a2e9-c3d91c56310c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.127.246:50700/bin.sh",
      "pattern": "[url:value = 'http://123.5.127.246:50700/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:52:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884331/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fbde55d-251a-52fd-908e-b3861065ee46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1jV9G-oYJ7DbIAYj30moK_iOzqOMTiiI8",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1jV9G-oYJ7DbIAYj30moK_iOzqOMTiiI8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:51:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884330/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6630e1ad-9bba-5b80-bf73-e32159324028",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lttazjwo.pishbini90bet.bet/59503b90-9a48-4a03-a04c-5e9efa53ec1b",
      "pattern": "[url:value = 'https://lttazjwo.pishbini90bet.bet/59503b90-9a48-4a03-a04c-5e9efa53ec1b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:48:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884329/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe9d83dd-003a-5640-bb8d-57034982e96c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-f93d8f3d09584450b14b92394267bcc2.r2.dev/ZA_Access_My_Department%20(1).msi",
      "pattern": "[url:value = 'https://pub-f93d8f3d09584450b14b92394267bcc2.r2.dev/ZA_Access_My_Department%20(1).msi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:45:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884328/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57573eed-445d-5ea4-bbb5-6f64505a5bda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-7e20e5854b5e4214a724a4f226301ea9.r2.dev/New_Approved_statementsss.zip",
      "pattern": "[url:value = 'https://pub-7e20e5854b5e4214a724a4f226301ea9.r2.dev/New_Approved_statementsss.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884327/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0b7c27a-178c-593f-9ae6-03cb81a96af0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://185.9.139.117:35150/bin.sh",
      "pattern": "[url:value = 'http://185.9.139.117:35150/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:29:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884326/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eefcad3f-23bb-569a-9f97-f8e6fc0d9923",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.157.183:54728/bin.sh",
      "pattern": "[url:value = 'http://182.121.157.183:54728/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:27:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884325/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9b72600-5c3b-5132-9eaf-902db44b1bfe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.83.28.19/a.exe",
      "pattern": "[url:value = 'http://45.83.28.19/a.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884324/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2a9067a-f67f-59ef-9a1b-034fd1e0accf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xczy.barcelona11.com/aacf7c7b-f1ff-47e2-9e0f-81f096da2083",
      "pattern": "[url:value = 'https://xczy.barcelona11.com/aacf7c7b-f1ff-47e2-9e0f-81f096da2083']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884323/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff2ae087-6782-53de-ab89-ae00b4e0668b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.29.195:46973/i",
      "pattern": "[url:value = 'http://110.36.29.195:46973/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:18:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884322/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a3b01e2-6e04-5ec3-8277-42ec379142dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://216.9.224.48/7/drmSjnm.txt",
      "pattern": "[url:value = 'http://216.9.224.48/7/drmSjnm.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:06:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884321/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4140cbdd-d12d-5c20-8ffd-d8c434918948",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.28.68.44:57208/bin.sh",
      "pattern": "[url:value = 'http://120.28.68.44:57208/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T12:04:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884320/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c632d29-60d1-5c45-83a5-18df51f53597",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1Q3L8qtXUanbTgSrUklB2Hq5e9Lp75xop",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1Q3L8qtXUanbTgSrUklB2Hq5e9Lp75xop']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:56:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884319/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce2a5be5-e177-5a81-99c1-d264e06210c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.192.126:59717/i",
      "pattern": "[url:value = 'http://42.224.192.126:59717/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:54:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884318/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb1852d2-790d-5775-ac62-91d16cc4cca2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.29.195:46973/bin.sh",
      "pattern": "[url:value = 'http://110.36.29.195:46973/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:51:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884317/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--555e79f9-55c6-5f09-9c3b-a67f8ccabfbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vsdipcxs.persianeducation.ir/9e5cdafe-6ccf-4f92-bbb6-2222b72b1f9d",
      "pattern": "[url:value = 'https://vsdipcxs.persianeducation.ir/9e5cdafe-6ccf-4f92-bbb6-2222b72b1f9d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:51:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884316/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bf500df-caca-5504-9a90-41fd8abc5194",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.124.209:35364/bin.sh",
      "pattern": "[url:value = 'http://27.215.124.209:35364/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:46:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884315/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e528e337-db32-510c-a5b3-73c7fcaec250",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.87.36.107:57053/i",
      "pattern": "[url:value = 'http://39.87.36.107:57053/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:45:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884314/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eab37ab-8f09-5400-87bd-ac8aeac7fb5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.187.105.203:54379/bin.sh",
      "pattern": "[url:value = 'http://45.187.105.203:54379/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884313/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--345ac76a-b757-5207-9aeb-11d2526fa521",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.140.183.206:40838/i",
      "pattern": "[url:value = 'http://222.140.183.206:40838/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:28:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884312/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25c2b8e1-a869-5dd1-8b0f-3d6421a184ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.235.83.217:33845/bin.sh",
      "pattern": "[url:value = 'http://42.235.83.217:33845/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:24:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884311/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57702f6b-7d79-5e4b-8078-6df340db0245",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.63.246.10:53651/i",
      "pattern": "[url:value = 'http://115.63.246.10:53651/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:22:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884310/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a141020-c0f3-5ef7-8809-8abc6800f3db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bmmp.ace90betyek.bet/fff24796-f2c8-40f2-a301-62bd7d7e714a",
      "pattern": "[url:value = 'https://bmmp.ace90betyek.bet/fff24796-f2c8-40f2-a301-62bd7d7e714a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:20:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884309/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--201dcd2c-52c5-50b5-942f-4df06b90046d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://208.85.17.8/api/payload?arch=$(uname",
      "pattern": "[url:value = 'http://208.85.17.8/api/payload?arch=$(uname']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:18:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884308/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3efb2eb-0dcd-5d4c-83ee-01f4e33f6b39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.63.246.10:53651/bin.sh",
      "pattern": "[url:value = 'http://115.63.246.10:53651/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:15:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884307/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3234e06-f836-5f18-b868-00e936feabe8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.248.110.0:35255/i",
      "pattern": "[url:value = 'http://112.248.110.0:35255/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:06:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884306/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bca8f868-2d76-5e81-aa00-4bcb8fe64c77",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xfcv55u8.iraniporn.video/?ublib=6ecfa6fe-e170-4920-b8e4-d9e5399d8e0a",
      "pattern": "[url:value = 'https://xfcv55u8.iraniporn.video/?ublib=6ecfa6fe-e170-4920-b8e4-d9e5399d8e0a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:06:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884305/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--070221fa-e3f9-513a-acef-8decbe559cb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.95.121:59995/bin.sh",
      "pattern": "[url:value = 'http://115.50.95.121:59995/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884304/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9543abe8-c7b1-5ca7-b977-006ac6691bea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://getsolara.live/Launcher.exe",
      "pattern": "[url:value = 'https://getsolara.live/Launcher.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:04:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884303/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f5585a8-c280-55fc-82d9-927cb083ae6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.192/fmkyq9.sh",
      "pattern": "[url:value = 'http://94.154.43.192/fmkyq9.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:04:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884302/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcd5ea05-5758-5045-b2a1-83f26138f1d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kuqetgql.shartebartar.game/?ublib=34d8a9de-a8ab-4545-8d79-06a4d0d5d774",
      "pattern": "[url:value = 'https://kuqetgql.shartebartar.game/?ublib=34d8a9de-a8ab-4545-8d79-06a4d0d5d774']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T11:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884301/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d78c6cec-fe44-5a60-9c2f-82dc7fd6af3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wfwwdsvv.irantop.bet/e6098dd5-2d3b-455c-9de8-0f2b4f545e50",
      "pattern": "[url:value = 'https://wfwwdsvv.irantop.bet/e6098dd5-2d3b-455c-9de8-0f2b4f545e50']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:54:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884300/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc3f09f0-61ec-5291-995c-5ebdfad2f5a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.17.72.69:55483/i",
      "pattern": "[url:value = 'http://60.17.72.69:55483/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:45:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884299/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cfe4fba-273a-5e57-b8c3-d98dfadc2ae2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.122.76:43722/bin.sh",
      "pattern": "[url:value = 'http://222.141.122.76:43722/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:41:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884298/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c59ca59c-727f-52b5-a9c8-24981b4f5840",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.42.89.50:56735/i",
      "pattern": "[url:value = 'http://59.42.89.50:56735/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:40:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884297/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef520e70-baac-592d-9fb4-d53185cd6e41",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.229.223.233:45318/i",
      "pattern": "[url:value = 'http://42.229.223.233:45318/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:33:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884296/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c378e9a2-d00e-57d3-8195-119e73ba43c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.156.53.53:52805/i",
      "pattern": "[url:value = 'http://219.156.53.53:52805/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:31:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884295/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--214bc1ae-1c8b-5f11-aaab-acbe6e8c9333",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.9.35.137:60865/i",
      "pattern": "[url:value = 'http://95.9.35.137:60865/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:22:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884294/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74d43ca0-b219-53ff-9556-46db885253b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pcue.elitesport.ir/d0f05d0e-a843-4f92-acc4-7e72d8746da0",
      "pattern": "[url:value = 'https://pcue.elitesport.ir/d0f05d0e-a843-4f92-acc4-7e72d8746da0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884293/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8d6316a-1fee-5a2a-b259-b32dbf56a468",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.17.72.69:55483/bin.sh",
      "pattern": "[url:value = 'http://60.17.72.69:55483/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:21:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884292/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d274aae3-5bc7-5594-9d43-042a160be062",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.74.90.207:56876/i",
      "pattern": "[url:value = 'http://39.74.90.207:56876/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:18:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884291/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--607c2fc1-bd52-5536-b788-320325bb094e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.9.35.137:60865/bin.sh",
      "pattern": "[url:value = 'http://95.9.35.137:60865/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884290/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1eca455e-5435-5620-9cc8-56e22589c3e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.156.53.53:52805/bin.sh",
      "pattern": "[url:value = 'http://219.156.53.53:52805/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T10:05:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884289/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb50659a-7609-542c-98cf-e591bcaa91bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wvew.elitesport.ir/ee986a47-f18b-44d5-8a52-64088210a19a",
      "pattern": "[url:value = 'https://wvew.elitesport.ir/ee986a47-f18b-44d5-8a52-64088210a19a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:57:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884288/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac18ef3c-2a42-5b2d-a7bd-3ed34c6fad91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.11.194:48898/i",
      "pattern": "[url:value = 'http://196.190.11.194:48898/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884287/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c17e329-393a-523d-b861-15eccac02419",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://183.62.222.13:39203/i",
      "pattern": "[url:value = 'http://183.62.222.13:39203/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:56:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884286/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8a08c04-122e-5ab5-9009-af836603d7de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.42.89.50:56735/bin.sh",
      "pattern": "[url:value = 'http://59.42.89.50:56735/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:55:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884285/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee986b97-70f6-5985-92c3-55090eaad0dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.188.6.166:48522/i",
      "pattern": "[url:value = 'http://123.188.6.166:48522/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:49:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884284/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a80ec60e-78aa-5ce4-8bb9-8334c54f21e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.176.31:38829/bin.sh",
      "pattern": "[url:value = 'http://115.52.176.31:38829/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884283/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f74c5b1e-6ccd-55ad-a80a-fe61353af1b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://oulkepos.nikansefile.ir/885af22a-0a25-4950-b227-be5f70468d3d",
      "pattern": "[url:value = 'https://oulkepos.nikansefile.ir/885af22a-0a25-4950-b227-be5f70468d3d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:49:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884282/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b770a89f-0947-56d7-a018-97eb56ffe519",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.139.228.144:44143/i",
      "pattern": "[url:value = 'http://222.139.228.144:44143/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:46:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884281/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--928dd893-54e8-537d-bc16-0f54a1bfa791",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jnfj.elitesport.ir/0171a959-5115-4358-b061-9328efdbe9f6",
      "pattern": "[url:value = 'https://jnfj.elitesport.ir/0171a959-5115-4358-b061-9328efdbe9f6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:43:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884280/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98d4954b-3cc4-5cd2-ac33-c0cbd7969436",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://arena-router.com/davennn.png",
      "pattern": "[url:value = 'http://arena-router.com/davennn.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:40:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884279/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08221e83-09ea-5bc4-9117-4d41a343ff6a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/jennyloops/fakepay/main/Fakepay.jar",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jennyloops/fakepay/main/Fakepay.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884278/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7a22e7d-a5be-5018-9d6b-c753be09e9c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/jennyloops/radium/main/Radiumclient.jar",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jennyloops/radium/main/Radiumclient.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:39:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884277/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af9559be-f8ca-569d-a7fb-5e30ae2b9a48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/jennyloops/xenon/main/Xenonclient.jar",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jennyloops/xenon/main/Xenonclient.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:39:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faefdb2a-5134-565c-92b5-2e95754c388f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/jennyloops/krypton/main/kryptonclient.jar",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jennyloops/krypton/main/kryptonclient.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:39:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e574c211-23c1-5199-8bf2-b99c785830c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/jennyloops/4e/main/4eclient.jar",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jennyloops/4e/main/4eclient.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:39:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884275/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ea1dc39-9708-55e2-9fe6-2827e82a735d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/jennyloops/gamblerig/main/Gamblerig.jar",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jennyloops/gamblerig/main/Gamblerig.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:39:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884276/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0ea560d-5282-593d-b65d-b3a608f71bad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.39.226.207:38554/i",
      "pattern": "[url:value = 'http://110.39.226.207:38554/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fde3047d-e4ab-59f8-857b-63cb329827dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://duqvs764.likesport.ir/?ublib=fec07f89-75b3-4a30-8891-d23d590f027c",
      "pattern": "[url:value = 'https://duqvs764.likesport.ir/?ublib=fec07f89-75b3-4a30-8891-d23d590f027c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:22:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1893a7a3-0580-5cdf-b42c-7d9b0229d50f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://solar-sanat.net/chrome78.exe",
      "pattern": "[url:value = 'https://solar-sanat.net/chrome78.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:20:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1433db6a-a3d2-58e8-b09e-2faab4c28f88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.139.228.144:44143/bin.sh",
      "pattern": "[url:value = 'http://222.139.228.144:44143/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:19:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85352619-c0ab-5b9d-afb9-f4795e66fa75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://drive.google.com/uc?export=download&id=194Tdr8JIZMjhUah53b9upptKKsJOS0es",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=194Tdr8JIZMjhUah53b9upptKKsJOS0es']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:19:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99255d58-8815-54bd-b53e-c9aa6ed87552",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.188.6.166:48522/bin.sh",
      "pattern": "[url:value = 'http://123.188.6.166:48522/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:18:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96404bd1-7f8c-58d6-ac7f-56bd3e9048f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.106.139.40:55875/i",
      "pattern": "[url:value = 'http://95.106.139.40:55875/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:16:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbeab08a-846d-58c2-8318-ebc8142eba32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ticladevin.ro/robott.ps1",
      "pattern": "[url:value = 'https://ticladevin.ro/robott.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:15:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b7b17d3-c868-59db-b973-c045c99c6d11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://unix-technology.com/admin/MSI_PRO.png",
      "pattern": "[url:value = 'https://unix-technology.com/admin/MSI_PRO.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2db9478-a53a-5d79-b9c8-21d49f553347",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pdlaw.com.ph/wp-admin/BALL/stub2.ps1",
      "pattern": "[url:value = 'https://pdlaw.com.ph/wp-admin/BALL/stub2.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:05:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35077e5e-b13b-5ec6-a151-3c366a65aac5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://q8nw6zme.fileboroo.com/?ublib=0ede463b-b4e4-4cc1-b1c6-3a24053aa924",
      "pattern": "[url:value = 'https://q8nw6zme.fileboroo.com/?ublib=0ede463b-b4e4-4cc1-b1c6-3a24053aa924']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:02:44Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d40f6f5-027a-560e-87e6-5032e1f51566",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.69.1:59335/bin.sh",
      "pattern": "[url:value = 'http://115.50.69.1:59335/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T09:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ce3a82-683a-5e98-808e-4f4dc6440c75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://goldland8.com/wordpress/wp-content/plugins/yolk/img_234646.png",
      "pattern": "[url:value = 'https://goldland8.com/wordpress/wp-content/plugins/yolk/img_234646.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:57:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc0a3670-1f78-5325-8c32-f389bddcfd1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://shy-hall-9c09.cryptersandtoolsoficial.workers.dev/XvIko",
      "pattern": "[url:value = 'https://shy-hall-9c09.cryptersandtoolsoficial.workers.dev/XvIko']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:57:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bfa6424-756f-5141-81fc-bb5f3c9fe0fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://crypter.howto.rocks/img_225526.png",
      "pattern": "[url:value = 'https://crypter.howto.rocks/img_225526.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:56:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e509f57b-5ad6-5d3d-8e13-cae1baa319dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://shy-hall-9c09.cryptersandtoolsoficial.workers.dev/pQDyy",
      "pattern": "[url:value = 'https://shy-hall-9c09.cryptersandtoolsoficial.workers.dev/pQDyy']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:56:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--867f190e-1228-5a1c-a680-4d0075580969",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://anglingforimages.com/puggh/doc/ScreenConnect.ClientSetup.msi",
      "pattern": "[url:value = 'https://anglingforimages.com/puggh/doc/ScreenConnect.ClientSetup.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:54:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a97aef8-6d59-54bc-b2fc-a8a83e0f83f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fqsmqhyz.mosbatsms.ir/3043417a-b1d9-4c9b-8088-cf6938ac8506",
      "pattern": "[url:value = 'https://fqsmqhyz.mosbatsms.ir/3043417a-b1d9-4c9b-8088-cf6938ac8506']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:52:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a99912ea-52b0-5a55-a30e-0e18613ba8e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://basegrid.cfd/yufile/MSI_PRO77.png",
      "pattern": "[url:value = 'http://basegrid.cfd/yufile/MSI_PRO77.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:52:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6552a56c-c7f8-526e-901b-55cdbff6a722",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ventaslll.com/admin/MSI_PRO.png",
      "pattern": "[url:value = 'https://ventaslll.com/admin/MSI_PRO.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:51:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bea8d283-13df-546b-9bbf-7383acf1f8d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://basegrid.cfd/yufile/YUoldrdp.png",
      "pattern": "[url:value = 'http://basegrid.cfd/yufile/YUoldrdp.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:51:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d9a59b7-2600-53f2-8bab-b05b8a33f0a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/xxx.png",
      "pattern": "[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/xxx.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:49:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d672cb4-e9cf-531e-92fb-b2996d56adf1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://95.106.139.40:55875/bin.sh",
      "pattern": "[url:value = 'http://95.106.139.40:55875/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:48:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9f74aa5-863d-50f3-80fd-05996bfab379",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://shy-hall-9c09.cryptersandtoolsoficial.workers.dev/mlTzN",
      "pattern": "[url:value = 'https://shy-hall-9c09.cryptersandtoolsoficial.workers.dev/mlTzN']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:48:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8de865d-59fa-585e-ace2-5a4a7dd2d053",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://partytimedjsohio.com/fed/rawfile.exe",
      "pattern": "[url:value = 'https://partytimedjsohio.com/fed/rawfile.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:42:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be616b9f-1d3e-5120-a942-00f3c8720473",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://aapt.betsher.casino/7459ddcd-6c5c-439e-b3b0-53a81af5c85d",
      "pattern": "[url:value = 'https://aapt.betsher.casino/7459ddcd-6c5c-439e-b3b0-53a81af5c85d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:42:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--142f3907-0faa-5cbf-bfb5-3159e0b8d771",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://partytimedjsohio.com/bbl2/ARAW.exe",
      "pattern": "[url:value = 'https://partytimedjsohio.com/bbl2/ARAW.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:40:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9fe56fd-9ab1-5fa2-9737-44a262e37ef6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://res.cloudinary.com/dp1ymsqid/image/upload/v1783584059/img_005701_bsqk4y.jpg",
      "pattern": "[url:value = 'https://res.cloudinary.com/dp1ymsqid/image/upload/v1783584059/img_005701_bsqk4y.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:40:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e4fe471-8ce8-5de7-872d-7861506a21c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://170.39.215.70/jwnYx38.bin",
      "pattern": "[url:value = 'http://170.39.215.70/jwnYx38.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7de27f3-10e3-5e2b-85c5-fa048251df04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://170.39.215.70/Siames7.ocx",
      "pattern": "[url:value = 'http://170.39.215.70/Siames7.ocx']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a51d0c2-513d-57af-917d-c86ca85a1eca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://170.39.215.70/Phar.pcx",
      "pattern": "[url:value = 'http://170.39.215.70/Phar.pcx']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:38:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14ee46a6-53c3-51cc-a4a3-a85309dd8fee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.16.231:35960/i",
      "pattern": "[url:value = 'http://115.61.16.231:35960/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:36:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0b9d74b-7e2a-569a-9d83-71c5d0da3d59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.250.127:37744/i",
      "pattern": "[url:value = 'http://115.55.250.127:37744/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--347d6c96-ce8d-59f9-a36d-521084d49ec2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://filezox.xyz/common/axis/edu.png",
      "pattern": "[url:value = 'http://filezox.xyz/common/axis/edu.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:28:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97130542-5aba-52fa-833a-f7cfaf10b048",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://filezox.xyz/common/axis/dbk.png",
      "pattern": "[url:value = 'http://filezox.xyz/common/axis/dbk.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:27:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5967975e-9404-5d46-8c65-085dff41e5f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://filezox.xyz/common/axis/richy.png",
      "pattern": "[url:value = 'http://filezox.xyz/common/axis/richy.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:27:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--135dad8d-a193-50cb-836f-6a28e7e83de7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://filezox.xyz/common/axis/chief.png",
      "pattern": "[url:value = 'http://filezox.xyz/common/axis/chief.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:27:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f2646c1-9e47-5943-bb76-24188a007b04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://filezox.xyz/common/axis/bt.png",
      "pattern": "[url:value = 'http://filezox.xyz/common/axis/bt.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:27:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfff0fd0-ee4b-5b87-ad8f-0bf6262f9941",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://filezox.xyz/common/axis/msi.png",
      "pattern": "[url:value = 'http://filezox.xyz/common/axis/msi.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:27:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85164eb5-1c08-5591-a4ea-a9043d8adbef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://183.23.132.114:53767/bin.sh",
      "pattern": "[url:value = 'http://183.23.132.114:53767/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:24:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c02d9ed8-73ba-58a5-baa4-7b11fdf810e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.225.26.19:45883/bin.sh",
      "pattern": "[url:value = 'http://105.225.26.19:45883/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:22:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4658cbc-297f-5a91-9205-000d74ef121c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://41.216.189.157/nerv.mpsl",
      "pattern": "[url:value = 'http://41.216.189.157/nerv.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:16:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af17e314-7c92-57e6-82fa-6d78a9c55851",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.60.248.91:59455/i",
      "pattern": "[url:value = 'http://115.60.248.91:59455/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:12:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b77c3984-2298-5f0f-8ccb-21d6eb0a5045",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.243.121:35977/i",
      "pattern": "[url:value = 'http://115.52.243.121:35977/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:07:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aec1e16e-f61a-51c6-8f29-d612f0a1506a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.16.231:35960/bin.sh",
      "pattern": "[url:value = 'http://115.61.16.231:35960/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T08:04:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06690d75-fedd-5a74-aa2b-01ce9137d777",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ncvhdwcq.medsalamat.ir/709b6649-cccd-45a6-997e-a15b53944778",
      "pattern": "[url:value = 'https://ncvhdwcq.medsalamat.ir/709b6649-cccd-45a6-997e-a15b53944778']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:58:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1be544f7-4ece-5132-b70d-2c44189f30b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.69.24:42321/i",
      "pattern": "[url:value = 'http://42.224.69.24:42321/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:56:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b2d9d00-99f4-5099-9380-1290a61c9cc3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/mips",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:56:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7b42313-8e2b-5eac-bbc2-4f69dc86aa23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.9.4:48207/i",
      "pattern": "[url:value = 'http://115.49.9.4:48207/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:56:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2f8119b-dce4-5de0-b559-7e55d9052759",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://trlcayaw.matalebeziba.ir/0cd962cd-60ab-477e-a8c5-f937b0fc7d86",
      "pattern": "[url:value = 'https://trlcayaw.matalebeziba.ir/0cd962cd-60ab-477e-a8c5-f937b0fc7d86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0ea64bb-0030-578b-b09a-ffbccf106531",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/armv7l",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bc15464-65fb-5d40-a68a-b16b182a2650",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/i586",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/i586']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40f0ecd1-1677-5597-b2bb-333ffb0dc397",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/powerpc",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eab60294-e0db-5852-b4ec-9c16a144853d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/x86_64",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aed073bc-a4d6-5deb-8281-66fa7ce639d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/armv4l",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bcf378c-df6e-536c-b2f2-356dea63f678",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/sparc",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be2fab53-3761-5365-b24f-f33a137c16be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/armv6l",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ca8bf96-353d-5b21-8dad-f7292f979141",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/sh4",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88fef65c-c4e8-5f85-84f7-54cb302d1bfb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/armv5l",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86d65f12-50e9-5d66-b4f5-19954aaedcb5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/m68k",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:41:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3805936-4e76-541f-a01c-fc3fe3750ec3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://lynxsecurity.ru:2022/mipsel",
      "pattern": "[url:value = 'http://lynxsecurity.ru:2022/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:39:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fbead99-2768-555f-80f2-ea4ba44ead0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.60.248.91:59455/bin.sh",
      "pattern": "[url:value = 'http://115.60.248.91:59455/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:39:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884211/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed83aae1-9205-5f0c-83a4-a55bf127b5bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://akvy.20sport.ir/b558b7a4-044e-4334-8187-4a3d029831b7",
      "pattern": "[url:value = 'https://akvy.20sport.ir/b558b7a4-044e-4334-8187-4a3d029831b7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:39:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42b07f2d-f52a-544a-8ee0-6e588148c498",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.44.222.231:44025/i",
      "pattern": "[url:value = 'http://125.44.222.231:44025/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:27:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9463d1c6-6e0f-53c7-bbc9-d642a4df5f67",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.2.23:39355/i",
      "pattern": "[url:value = 'http://110.36.2.23:39355/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ceeff9bb-8d2c-548d-9f3c-102b1e6418a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.178.188.100:58317/i",
      "pattern": "[url:value = 'http://119.178.188.100:58317/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--499ee47e-bda0-507d-bbf4-f1fe4bfcc66a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.9.4:48207/bin.sh",
      "pattern": "[url:value = 'http://115.49.9.4:48207/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:21:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f24b9af5-262d-53bb-89fc-5ae0288c35b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.95.167:51542/i",
      "pattern": "[url:value = 'http://221.15.95.167:51542/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:16:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce156dad-3ece-55e5-9249-61acd2afcb27",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.82.26:59104/i",
      "pattern": "[url:value = 'http://182.126.82.26:59104/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:15:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a09a218-97fe-5165-9eb0-4f80602e2a8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.63.187:50975/i",
      "pattern": "[url:value = 'http://115.55.63.187:50975/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:14:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--212d52fa-f18b-59b5-9fa1-db85c0511afe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.44.222.231:44025/bin.sh",
      "pattern": "[url:value = 'http://125.44.222.231:44025/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:10:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c9bc6c8-b168-5027-b7c1-1bcf623400ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.124.209:35364/i",
      "pattern": "[url:value = 'http://27.215.124.209:35364/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:08:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b34de513-5263-5861-8be8-ed824a3dd3f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.244.36.34:37146/bin.sh",
      "pattern": "[url:value = 'http://94.244.36.34:37146/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:05:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5236fb66-c83a-5737-a030-f9e6d46871a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.243.121:35977/bin.sh",
      "pattern": "[url:value = 'http://115.52.243.121:35977/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:04:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f23c721-4cb0-5f73-98b6-ac1118a0fd87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mdazhynx.btyek.site/?ublib=fb6db7fc-d185-47f5-bfc7-83e6ce5e93df",
      "pattern": "[url:value = 'https://mdazhynx.btyek.site/?ublib=fb6db7fc-d185-47f5-bfc7-83e6ce5e93df']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad4d7cdc-07ad-558c-9d19-e4a8e4b1d523",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.63.187:50975/bin.sh",
      "pattern": "[url:value = 'http://115.55.63.187:50975/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:51:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b54861e8-b1b4-504c-93b7-745d506a9a92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cniqfzhe.riskybet.casino/4940fa3e-8808-4c43-907e-2937a9212512",
      "pattern": "[url:value = 'https://cniqfzhe.riskybet.casino/4940fa3e-8808-4c43-907e-2937a9212512']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05dfb87b-2a12-5e61-b688-beb92d11db03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.232.87.186:35730/i",
      "pattern": "[url:value = 'http://42.232.87.186:35730/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c8c56b2-2191-55f4-9975-cb0ccb95fe7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.2.23:39355/bin.sh",
      "pattern": "[url:value = 'http://110.36.2.23:39355/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--243b3d14-e2b2-5231-a58d-c0750ab3fe11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cztv.betfa.download/786b058c-3c35-45d1-bd4e-c418847abb32",
      "pattern": "[url:value = 'https://cztv.betfa.download/786b058c-3c35-45d1-bd4e-c418847abb32']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:37:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f20adb89-23b9-5281-82a4-4c39d4f496ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.140/files/7411337060/zz4Sj5M.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/7411337060/zz4Sj5M.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:28:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eca2f55-4a38-5c01-a15a-e06c1b2a0958",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.97.76:44096/i",
      "pattern": "[url:value = 'http://123.14.97.76:44096/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79d0f22c-4b43-56e6-91ba-d2c241b7082b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.82.26:59104/bin.sh",
      "pattern": "[url:value = 'http://182.126.82.26:59104/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:18:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--170fe1a5-15ce-541c-a4e9-24390c45af69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://180.244.8.111:48519/i",
      "pattern": "[url:value = 'http://180.244.8.111:48519/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d416d64-d66d-5918-bafb-a6dccb1564d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://snbzg3fu.noscriptc11pills.com/?ublib=2af76072-aea3-4559-ad09-188afc2701f3",
      "pattern": "[url:value = 'https://snbzg3fu.noscriptc11pills.com/?ublib=2af76072-aea3-4559-ad09-188afc2701f3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T06:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46f15dc2-b720-5b9a-a859-1e901875f8d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.4.89:46260/i",
      "pattern": "[url:value = 'http://110.36.4.89:46260/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:56:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--787cfdeb-26b7-558f-958a-1cd402939c1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.39.168:35362/i",
      "pattern": "[url:value = 'http://182.127.39.168:35362/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:56:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40899b26-fd10-5253-8d18-ef23863baeae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.62.148.220:57253/i",
      "pattern": "[url:value = 'http://115.62.148.220:57253/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f89487bf-ac35-53e7-9828-dcafec9671ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://183.23.132.114:53767/i",
      "pattern": "[url:value = 'http://183.23.132.114:53767/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:49:57Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a195818b-46bf-5e19-af82-686d8f2ec894",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xqbhmyyk.powershart.com/92288779-75be-4a6d-926a-60b720647e7f",
      "pattern": "[url:value = 'https://xqbhmyyk.powershart.com/92288779-75be-4a6d-926a-60b720647e7f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:46:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66315d21-d707-548b-a1a2-37ed098f5e8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.244.36.34:37146/i",
      "pattern": "[url:value = 'http://94.244.36.34:37146/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:44:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33bbd50a-2f34-5a0b-9484-93f183fdf05d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.39.168:35362/bin.sh",
      "pattern": "[url:value = 'http://182.127.39.168:35362/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:37:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6009e4b6-12ea-5385-915c-f224043cd7ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://203.177.251.31:46755/i",
      "pattern": "[url:value = 'http://203.177.251.31:46755/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--345d13fb-2a18-540e-b290-ead3d4fd4dd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zirq.bet24.casino/e84a1534-9d81-42e9-9885-87c9ec330dcc",
      "pattern": "[url:value = 'https://zirq.bet24.casino/e84a1534-9d81-42e9-9885-87c9ec330dcc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7118a270-b63b-5d88-8920-862ca8bd2c2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.arm7",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4e6c812-dae2-5761-bf46-6ce36354da1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.x86",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df91d651-2a63-59dd-b39f-ff086da893db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.ppc",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8eb8511e-47e7-53e2-b615-2da5ca7a08b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.mpsl",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4618f1d9-efa6-5145-910c-0a467e7d31d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.mips",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17642c9e-293d-54cc-8259-3b0f28c92219",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.m68k",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e92e841-da63-5dc0-92cd-97160848d4fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.arm6",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c53b03b5-9d8a-535f-b5b7-fc4857d57764",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.sh4",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8b427fe-68a6-5e45-b92f-abe9c8128202",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.arm5",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8233ff30-d786-50fa-87ad-5c742ca21136",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://98.91.254.110/bins/kalon.arm4",
      "pattern": "[url:value = 'http://98.91.254.110/bins/kalon.arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:34:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c1ffbf7-b610-50a1-a78a-159a4483b7eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.173.7:58528/i",
      "pattern": "[url:value = 'http://123.5.173.7:58528/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:31:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3828b646-9ab9-5440-b233-dd292e55b4d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.185/t0907.exe",
      "pattern": "[url:value = 'http://62.60.226.185/t0907.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58c9b4b4-3315-531d-b52b-6f0cec9b5c42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/zxcrAretard.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bins/zxcrAretard.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78ee36d0-8db9-5dc5-99c8-6e81f1e8ab0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/zxcrAretard.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bins/zxcrAretard.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad658f2f-5c3e-5b36-ae2e-2ee15954f5e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/zxcrAretard.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bin/zxcrAretard.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70a1bb5a-2edd-55a0-a363-b7933d13ba0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/services.apk",
      "pattern": "[url:value = 'http://94.154.43.42/bins/services.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f670b286-6f60-54b8-9fdf-4490b72aefa1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/zxcrAretard.x86",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/zxcrAretard.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e036ec57-fcf9-5e43-a4d6-a0df07bdf59c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/services.apk",
      "pattern": "[url:value = 'http://94.154.43.42/bin/services.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faeea24d-72b2-5ec1-b080-233205e332e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/sora.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/sora.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37a92e21-1c3c-5b94-a741-cd0ec2d70181",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/zxcrAretard.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bin/zxcrAretard.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4622c083-338a-5160-94a3-488937b40753",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/services.apk",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/services.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eeed465-c503-5aba-abb7-df948a2e6fe6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/zxcrAretard.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/zxcrAretard.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e9cf5cf-ea8d-549c-a022-5b128970c8d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/kokyru.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/kokyru.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faacbb60-49a1-5533-901d-0b7817e2e6b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/juanRetard.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bin/juanRetard.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8740c82-ba88-5838-9c1c-807b4df244c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/juanRetard.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bins/juanRetard.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41580e25-64b8-53d5-a380-1eb70a2fe38d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/juanRetard.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/juanRetard.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42564c38-e2be-562e-8d22-8445a6703fe4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/kokyru.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bins/kokyru.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24476024-2d2c-57fc-95f6-3cb8ab2d0a4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/kokyru.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bin/kokyru.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fbdc800-787f-5b66-ac4d-e8e9ae920f52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_dcef57ffcf0e32bc.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_dcef57ffcf0e32bc.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba03d8cd-77f0-57f7-943a-3512b90ccfd5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/kokyru.x86",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/kokyru.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dc6580c-ce64-5398-936f-e33f659a65e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/kokyru.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bin/kokyru.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2df83768-e7b8-5d9d-9ba3-881cadb4a2d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bin/juanRetard.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bin/juanRetard.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de7c6525-43e8-5419-8ce1-aafc2d4d487b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/juanRetard.x86",
      "pattern": "[url:value = 'http://94.154.43.42/bins/juanRetard.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f6ef8fc-d94f-5050-bac5-b614437d18b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/bins/kokyru.x86_64",
      "pattern": "[url:value = 'http://94.154.43.42/bins/kokyru.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbc72a6c-17cf-5c9d-9197-675991e24076",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://136.0.213.106:5173/api/build/download/agent-windows-amd64-13949790.exe",
      "pattern": "[url:value = 'https://136.0.213.106:5173/api/build/download/agent-windows-amd64-13949790.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45e86df0-7ad2-58b6-8659-02ccc69908a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://94.154.43.42/hiddenbin/juanRetard.x86",
      "pattern": "[url:value = 'http://94.154.43.42/hiddenbin/juanRetard.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--387f992f-183d-53e1-85f4-06d1d72cc6c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.4.89:46260/bin.sh",
      "pattern": "[url:value = 'http://110.36.4.89:46260/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afbc9464-209a-518e-a376-2263854344fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.62.148.220:57253/bin.sh",
      "pattern": "[url:value = 'http://115.62.148.220:57253/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bcb8d4a-868a-5141-8cd9-a88a335d35c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.172.198:52845/i",
      "pattern": "[url:value = 'http://222.137.172.198:52845/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:05:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71c70203-2bcb-54d1-8580-4d0bb3a51002",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.87.56.240:54271/i",
      "pattern": "[url:value = 'http://112.87.56.240:54271/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:01:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ed86861-99ad-55dd-87ff-25f698500cbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://078ia1jh.ace90betyek.bet/?ublib=d2a18dc6-1973-4194-9d66-88c43e684231",
      "pattern": "[url:value = 'https://078ia1jh.ace90betyek.bet/?ublib=d2a18dc6-1973-4194-9d66-88c43e684231']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T05:01:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab2d0197-255c-5ce0-a7af-c02eaf894b60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://90.224.208.190:36646/i",
      "pattern": "[url:value = 'http://90.224.208.190:36646/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:58:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5062633-47d7-5504-8adc-99a534bb4cea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.155.171.209:48935/i",
      "pattern": "[url:value = 'http://219.155.171.209:48935/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:56:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--132a12d6-423a-5078-8ddf-28d408179af4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://eznvrdxc.footbalpersian.ir/f2c098f5-f3e0-40ad-a000-78782cb85759",
      "pattern": "[url:value = 'https://eznvrdxc.footbalpersian.ir/f2c098f5-f3e0-40ad-a000-78782cb85759']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d4ff304-691c-53ee-bf5f-fed03da446f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/nulltrafficaway/labprojecttest/refs/heads/main/config.json",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nulltrafficaway/labprojecttest/refs/heads/main/config.json']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70fdf7ed-7f2a-5062-8a75-4c3e463824f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/nulltrafficaway/labprojecttest/refs/heads/main/w2.sh",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nulltrafficaway/labprojecttest/refs/heads/main/w2.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b88f6be2-14d1-5ebe-8c70-e7f0fdf9d0bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://glmo.bcgame90.casino/8f76290e-6931-4de5-9ee8-9545ab324a50",
      "pattern": "[url:value = 'https://glmo.bcgame90.casino/8f76290e-6931-4de5-9ee8-9545ab324a50']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:36:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50060ffa-ea17-5b7e-ae80-77f26d3c6ccc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.155.171.209:48935/bin.sh",
      "pattern": "[url:value = 'http://219.155.171.209:48935/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:31:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b40feac7-8856-5ef1-9964-74955d04f3b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://90.224.208.190:36646/bin.sh",
      "pattern": "[url:value = 'http://90.224.208.190:36646/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:27:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4c5778b-ac6c-531d-ba78-2a213044f30d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://i0wrocb4.bet90forward.win/?ublib=a40aa275-d00a-4425-932c-5fe320324758",
      "pattern": "[url:value = 'https://i0wrocb4.bet90forward.win/?ublib=a40aa275-d00a-4425-932c-5fe320324758']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:21:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e2886af-0012-59ae-903e-87069738e8b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.4.190.17:48149/bin.sh",
      "pattern": "[url:value = 'http://123.4.190.17:48149/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:20:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ef3a82c-8242-57bc-ba84-cdc655430c9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.87.56.240:54271/bin.sh",
      "pattern": "[url:value = 'http://112.87.56.240:54271/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:19:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5c13830-e79b-5322-a302-04f99a592097",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.117.148.156:56226/i",
      "pattern": "[url:value = 'http://182.117.148.156:56226/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T04:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cfc82ff-53c1-5e7b-a617-5d26021bfc26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://eiuphpvo.fiorentini.ir/8477f959-ef4f-460e-a604-625a89e32902",
      "pattern": "[url:value = 'https://eiuphpvo.fiorentini.ir/8477f959-ef4f-460e-a604-625a89e32902']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:54:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ee2c24d-ea8f-5d7a-a7bc-e8b5aa3232e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.39.234:40735/i",
      "pattern": "[url:value = 'http://110.37.39.234:40735/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--568b3e6f-6d96-56a2-8ba9-543d00b8d126",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.117.148.156:56226/bin.sh",
      "pattern": "[url:value = 'http://182.117.148.156:56226/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:48:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ca4c510-57d4-5206-b7dc-79373c4acedf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.229.103:59896/i",
      "pattern": "[url:value = 'http://42.239.229.103:59896/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f35bed57-3350-5757-85e1-691808385fdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.73.108.18:46667/bin.sh",
      "pattern": "[url:value = 'http://39.73.108.18:46667/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dfc7d4d-586b-5c27-8810-79d839a9dddc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.93.207.246:39950/i",
      "pattern": "[url:value = 'http://222.93.207.246:39950/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:36:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d0c7db1-38fd-5f69-b151-74bc9c25167e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ojvh.barcelona11.com/a79728b2-b069-4d3e-9f6d-885a7d31675e",
      "pattern": "[url:value = 'https://ojvh.barcelona11.com/a79728b2-b069-4d3e-9f6d-885a7d31675e']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eb494cc-aaf6-5d2f-8df1-f31453739982",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fh6sil11.test-drive-iran.com/?ublib=98cb34c2-559b-42ea-878a-06415764ba79",
      "pattern": "[url:value = 'https://fh6sil11.test-drive-iran.com/?ublib=98cb34c2-559b-42ea-878a-06415764ba79']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T03:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b305d6cb-46da-5d53-b7ff-a0bc4eeec7ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.203.19.155:49446/i",
      "pattern": "[url:value = 'http://115.203.19.155:49446/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:57:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89f4f523-30c7-52f8-b78c-a7ca67a20a62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.178.188.100:58317/bin.sh",
      "pattern": "[url:value = 'http://119.178.188.100:58317/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa8cbf4a-bab9-58be-8e51-c7a54b733e65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jxfszcuc.megaparifarsi.com/ec265e54-974c-4371-8588-0fc9c2583ad2",
      "pattern": "[url:value = 'https://jxfszcuc.megaparifarsi.com/ec265e54-974c-4371-8588-0fc9c2583ad2']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:53:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6c922c3-979a-5356-8fa9-163fa4319f90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://psqj.app888starz.download/dedb7c36-d013-4fcd-827b-56942ebaa585",
      "pattern": "[url:value = 'https://psqj.app888starz.download/dedb7c36-d013-4fcd-827b-56942ebaa585']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:36:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f76bafe-7fdc-59fd-9342-2bfa45bb833a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.226.231.9:53591/bin.sh",
      "pattern": "[url:value = 'http://42.226.231.9:53591/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:27:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf60b1b2-5d4f-59ab-bee4-9222e4c14fd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.228.151.189:48866/bin.sh",
      "pattern": "[url:value = 'http://113.228.151.189:48866/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7283b66a-1b8b-5d01-97bb-1265e6dc3482",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.85.109.44:41787/i",
      "pattern": "[url:value = 'http://110.85.109.44:41787/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c9528e7-0b7f-5e73-9ac0-31be2b2e8c27",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.133.180:53994/i",
      "pattern": "[url:value = 'http://196.190.133.180:53994/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:16:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b317f4fa-44e3-57e3-a38d-5cc74413aabb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.77.40:40335/i",
      "pattern": "[url:value = 'http://123.11.77.40:40335/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T02:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f1b8c2e-f20c-5609-adb6-fd1a0421078c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://omjsikzk.irantop.bet/9ce99d4e-dcbe-420f-9e17-84b4b69b8143",
      "pattern": "[url:value = 'https://omjsikzk.irantop.bet/9ce99d4e-dcbe-420f-9e17-84b4b69b8143']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:58:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20d652d1-c3d6-5767-a53b-e2a41c58ebe4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.63.230.109:35501/bin.sh",
      "pattern": "[url:value = 'http://115.63.230.109:35501/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:53:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dd3e501-391c-5dd4-bb08-96f9190a15e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.133.180:53994/bin.sh",
      "pattern": "[url:value = 'http://196.190.133.180:53994/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:48:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a9bda56-3ca4-5172-baa9-20820770b648",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.40.97:51546/i",
      "pattern": "[url:value = 'http://115.52.40.97:51546/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c06a09fa-c9c1-5260-a0a9-eec74b2d8974",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.108.91:46070/bin.sh",
      "pattern": "[url:value = 'http://182.127.108.91:46070/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:40:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12ed97d2-ef3f-56b2-8cce-5b025c21e3b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ftoa.healthvarzesh.ir/2426b78e-96df-46cf-9f9e-671efde71f1b",
      "pattern": "[url:value = 'https://ftoa.healthvarzesh.ir/2426b78e-96df-46cf-9f9e-671efde71f1b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ff36e63-018f-5f01-955b-27844a56fb1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.213.165.238:39667/i",
      "pattern": "[url:value = 'http://171.213.165.238:39667/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:31:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--237fdf8b-b146-5842-8b33-2065503710f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.85.203:60512/i",
      "pattern": "[url:value = 'http://163.142.85.203:60512/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:28:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76c5e838-e90c-591d-bc72-81f86f02edae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.40.97:51546/bin.sh",
      "pattern": "[url:value = 'http://115.52.40.97:51546/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:26:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50f0f58d-3c6b-5ece-b50b-5717b086ef98",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.180.135.36:49750/i",
      "pattern": "[url:value = 'http://59.180.135.36:49750/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:21:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--452d6abe-6a4f-5a71-b267-c10133844051",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.85.109.44:41787/bin.sh",
      "pattern": "[url:value = 'http://110.85.109.44:41787/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:17:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f17a0de-8867-5f73-a931-106edad25982",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.211.58.158:54183/i",
      "pattern": "[url:value = 'http://27.211.58.158:54183/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:09:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--457fd621-9ef9-55d1-bffa-bf6c3b62326c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.85.203:60512/bin.sh",
      "pattern": "[url:value = 'http://163.142.85.203:60512/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:04:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a804422c-82f4-5b57-b031-e6858989ea8b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://7j6ew89s.melbetir.casino/?ublib=d332c470-153d-4a80-b4f6-e2255fdf3c8f",
      "pattern": "[url:value = 'https://7j6ew89s.melbetir.casino/?ublib=d332c470-153d-4a80-b4f6-e2255fdf3c8f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1e51b2f-e79e-5c3e-9f11-589a0c42c269",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.183.140.79:56313/i",
      "pattern": "[url:value = 'http://182.183.140.79:56313/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:03:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e4214df-f2fd-5101-b048-109c90c6e231",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.121.225.7:36317/bin.sh",
      "pattern": "[url:value = 'http://182.121.225.7:36317/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T01:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a587504d-1217-55fa-ab77-aa57e81bf100",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.39.86:41282/i",
      "pattern": "[url:value = 'http://222.141.39.86:41282/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4d1c435-a68f-5219-8568-b1cb6adb8618",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://0mx8cbge.fa1xbet.vip/?ublib=c23e2bbb-32fe-42f7-9e2d-9f530971e04a",
      "pattern": "[url:value = 'https://0mx8cbge.fa1xbet.vip/?ublib=c23e2bbb-32fe-42f7-9e2d-9f530971e04a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:53:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daed6cbc-34ca-5ff4-89c3-0eb74e0fedd0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.74.60:57686/i",
      "pattern": "[url:value = 'http://42.231.74.60:57686/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:48:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--febe2ad8-12b3-5767-8fd0-6f7f4ad6e661",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.223.143.129:40270/i",
      "pattern": "[url:value = 'http://117.223.143.129:40270/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b14f13e9-9918-57da-8ec8-9e02e0f63356",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.112.79.205:54539/i",
      "pattern": "[url:value = 'http://182.112.79.205:54539/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf41c949-e125-5f2d-8f86-83214e2c6182",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.234.102.64:35903/i",
      "pattern": "[url:value = 'http://42.234.102.64:35903/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dff93c0-375b-53cb-9792-5a58a1907ff7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fhbd.golibet.page/82d7b13d-796c-4a21-91bb-f9e1135dfa1c",
      "pattern": "[url:value = 'https://fhbd.golibet.page/82d7b13d-796c-4a21-91bb-f9e1135dfa1c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb53ec85-0eb3-5352-965e-3491891ad825",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.39.86:41282/bin.sh",
      "pattern": "[url:value = 'http://222.141.39.86:41282/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7744154-de6b-5f77-adf6-c05a3047229a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.249.247.168:46267/bin.sh",
      "pattern": "[url:value = 'http://112.249.247.168:46267/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1449bae-119d-5f27-8faa-bb7ce3decb7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.234.102.64:35903/bin.sh",
      "pattern": "[url:value = 'http://42.234.102.64:35903/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:20:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfe81bf4-5059-5752-b4b1-e6f1733ac8e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://117.223.143.129:40270/bin.sh",
      "pattern": "[url:value = 'http://117.223.143.129:40270/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:18:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a84fc8b2-3ac2-51af-bd0d-503f99a889c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.74.60:57686/bin.sh",
      "pattern": "[url:value = 'http://42.231.74.60:57686/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:15:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc4ecb2d-e0c9-5b21-b90d-f490b0748728",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.176.31:38829/i",
      "pattern": "[url:value = 'http://115.52.176.31:38829/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:11:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884080/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--754b58bd-fbce-5021-aef5-a81b420ddb01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ujxjvdku.catsandcarp.com/0cc56791-942e-49a2-9b8b-c6b954e4db45",
      "pattern": "[url:value = 'https://ujxjvdku.catsandcarp.com/0cc56791-942e-49a2-9b8b-c6b954e4db45']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:07:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884079/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96c5f6a7-f20d-57ef-a85c-0bc4143defce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_8b191269d0a8fd0c.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_8b191269d0a8fd0c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:04:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884078/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a766100-365f-521e-9089-357307e41bed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.39.234:40735/bin.sh",
      "pattern": "[url:value = 'http://110.37.39.234:40735/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-09T00:01:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884077/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f08db722-c075-5e1d-b166-2630aabefa91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://203.177.251.31:46755/bin.sh",
      "pattern": "[url:value = 'http://203.177.251.31:46755/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:52:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884076/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b056b35b-f8c4-5a27-b790-cfcadfe897f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dumw.goaliran.ir/3ad266aa-a44b-4ef7-ad8d-befbd7e2f662",
      "pattern": "[url:value = 'https://dumw.goaliran.ir/3ad266aa-a44b-4ef7-ad8d-befbd7e2f662']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:35:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884075/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--318444f7-5817-54c7-b161-d6d8cbbabba1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.138.10.168:48528/i",
      "pattern": "[url:value = 'http://110.138.10.168:48528/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:24:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884074/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47500c02-dd9b-56ad-adb1-b02513a1484f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.166.188.48:50003/i",
      "pattern": "[url:value = 'http://45.166.188.48:50003/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:20:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884073/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d17613cd-e8d5-5cf0-afc1-59ce86f97821",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.201.66.140:50027/i",
      "pattern": "[url:value = 'http://221.201.66.140:50027/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:19:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884072/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2efb2036-3192-5ccb-b521-f2a17c1f7537",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://13d3c8zt.kick1bet.com/?ublib=7eb1968a-6eea-4e6f-92c6-7486b3aefec0",
      "pattern": "[url:value = 'https://13d3c8zt.kick1bet.com/?ublib=7eb1968a-6eea-4e6f-92c6-7486b3aefec0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884071/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07bdfd8e-3e94-5f16-aad8-3dc1d633e0c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.138.10.168:48528/bin.sh",
      "pattern": "[url:value = 'http://110.138.10.168:48528/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:10:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884070/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc73ba5c-5b88-5788-b892-984c2477b199",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://82.114.181.233:44817/i",
      "pattern": "[url:value = 'http://82.114.181.233:44817/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884069/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--253ec8aa-c312-511e-82a6-1bede5d5b07e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://196.190.69.149:43566/bin.sh",
      "pattern": "[url:value = 'http://196.190.69.149:43566/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T23:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884068/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da90f8d3-e115-59f2-975b-b80fb71177ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.201.66.140:50027/bin.sh",
      "pattern": "[url:value = 'http://221.201.66.140:50027/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884067/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a28070b1-070c-5578-84e7-534a2f336959",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.221.105:43847/i",
      "pattern": "[url:value = 'http://115.50.221.105:43847/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884066/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad88e642-87cc-5796-a0cd-4736cf442b0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hwgi901o.cialispi.com/?ublib=02095bbc-f535-447a-9bcb-bfd6283a0bbd",
      "pattern": "[url:value = 'https://hwgi901o.cialispi.com/?ublib=02095bbc-f535-447a-9bcb-bfd6283a0bbd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884065/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dde33524-1a7a-52d0-8c96-5801b959ca73",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.140.183.170:40303/i",
      "pattern": "[url:value = 'http://222.140.183.170:40303/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:50:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884064/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7483852b-f35b-5506-ad98-8dbaa31b5c21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.221.105:43847/bin.sh",
      "pattern": "[url:value = 'http://115.50.221.105:43847/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:33:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884063/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f66315e3-7ccd-596c-a1d5-927b7c48f860",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.4.215:59360/i",
      "pattern": "[url:value = 'http://115.49.4.215:59360/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:32:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884062/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2272736c-88e9-5c36-8351-6eb18695792d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hljr.gamesport.ir/22987b31-2701-4f2e-8ea0-d9dc9dc00290",
      "pattern": "[url:value = 'https://hljr.gamesport.ir/22987b31-2701-4f2e-8ea0-d9dc9dc00290']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884061/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--171da214-caed-5698-8f21-73c1d4f421a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://uyixzgec.betawarz.com/f9ed3df2-2094-4cfe-8275-9e7ffa173ea3",
      "pattern": "[url:value = 'https://uyixzgec.betawarz.com/f9ed3df2-2094-4cfe-8275-9e7ffa173ea3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:11:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884060/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b98a0c7c-202f-5daa-a7a5-e9fff62cd153",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.49.4.215:59360/bin.sh",
      "pattern": "[url:value = 'http://115.49.4.215:59360/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884059/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4716f70-9b0e-5238-bad5-1fb7b6b034a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ghccipia.fifa90bet.casino/a05dc409-14a5-4a77-bdc9-51c0f08059d2",
      "pattern": "[url:value = 'https://ghccipia.fifa90bet.casino/a05dc409-14a5-4a77-bdc9-51c0f08059d2']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:09:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884058/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cada50d6-f32f-5813-bdc6-66e79593ddfb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.177.183:36148/bin.sh",
      "pattern": "[url:value = 'http://115.55.177.183:36148/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:03:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884057/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10420e56-0089-54e5-b275-9077e9507c40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.1.213.59/y8jdGc5jS/Plugins/cred.dll",
      "pattern": "[url:value = 'http://37.1.213.59/y8jdGc5jS/Plugins/cred.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:02:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884056/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e5de3be-2213-5941-a1ab-cf409ecfa1a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.1.213.59/y8jdGc5jS/Plugins/clip64.dll",
      "pattern": "[url:value = 'http://37.1.213.59/y8jdGc5jS/Plugins/clip64.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884055/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87d21308-6fbb-510e-8318-69ac07127eac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.1.213.59/y8jdGc5jS/Plugins/clip.dll",
      "pattern": "[url:value = 'http://37.1.213.59/y8jdGc5jS/Plugins/clip.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:01:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884053/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22154d78-51e5-5ed6-886a-5ae2fb2c2b8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.1.213.59/y8jdGc5jS/Plugins/cred64.dll",
      "pattern": "[url:value = 'http://37.1.213.59/y8jdGc5jS/Plugins/cred64.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T22:01:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884054/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e56cb9-6503-55a8-871b-b43a2c674521",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.58.154.52:46622/i",
      "pattern": "[url:value = 'http://115.58.154.52:46622/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:45:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884052/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7f4d78d-cb49-5f56-8f3b-c17e85dc205d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://raw.githubusercontent.com/nulltrafficaway/labprojecttest/refs/heads/main/check2.sh",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nulltrafficaway/labprojecttest/refs/heads/main/check2.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:45:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884051/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3aed633-d28e-581a-bdf3-ca288292505f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://203.177.28.149:45551/bin.sh",
      "pattern": "[url:value = 'http://203.177.28.149:45551/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:37:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884050/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04e242a8-9b08-518d-9870-9c51e3722789",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gclz.futboliran.ir/77c4da64-1937-40b4-b2ed-870b021fd591",
      "pattern": "[url:value = 'https://gclz.futboliran.ir/77c4da64-1937-40b4-b2ed-870b021fd591']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884049/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2cdf890-fff9-58ae-a00a-e96ad1307271",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://66.212.186.197:33407/i",
      "pattern": "[url:value = 'http://66.212.186.197:33407/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:30:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884048/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78610ca8-1b49-5bd3-a5df-f48ac56931d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.140.183.170:40303/bin.sh",
      "pattern": "[url:value = 'http://222.140.183.170:40303/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:23:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884047/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43f14725-54ab-5df2-a8dc-1abc8868ef6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://smfnctms.fifa90.bet/d59048b8-33bb-4088-b616-ae04f0a8e12f",
      "pattern": "[url:value = 'https://smfnctms.fifa90.bet/d59048b8-33bb-4088-b616-ae04f0a8e12f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:16:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884046/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef8ef722-8f6c-5465-819d-293260b40d04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.176.9:57162/i",
      "pattern": "[url:value = 'http://27.215.176.9:57162/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T21:04:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884045/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68c31452-ee43-58ab-92f2-d595cfd1eeb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://4z0tdlyo.calvaryhospice.org/?ublib=f0a461af-70f7-4907-b701-98ef305590eb",
      "pattern": "[url:value = 'https://4z0tdlyo.calvaryhospice.org/?ublib=f0a461af-70f7-4907-b701-98ef305590eb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:52:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884044/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--540dc94f-29dd-5480-9396-ff7950dd4fee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.215.176.9:57162/bin.sh",
      "pattern": "[url:value = 'http://27.215.176.9:57162/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884043/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13c11382-cb5e-5785-ae38-432e9892f30f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ihnx.footbalpersian.ir/906ff932-3c62-4c96-8fd9-59ba0cec2529",
      "pattern": "[url:value = 'https://ihnx.footbalpersian.ir/906ff932-3c62-4c96-8fd9-59ba0cec2529']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884042/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--434e4261-d5c8-54f1-8d4d-11b636cb9832",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jtemlhyz.enfej.casino/7a94b3d0-8fc5-4e83-b97c-6dbd7523c06c",
      "pattern": "[url:value = 'https://jtemlhyz.enfej.casino/7a94b3d0-8fc5-4e83-b97c-6dbd7523c06c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:18:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884041/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e192e0a4-4aef-5d24-83d9-9287cd7f023c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.239.102.152:57314/i",
      "pattern": "[url:value = 'http://112.239.102.152:57314/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:08:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884040/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46d65f3a-92ba-5a8c-9320-19be1728089e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dgl7533w.melbetir.bet/?ublib=bdca0d5f-c783-454c-9977-b1b1f243c1bf",
      "pattern": "[url:value = 'https://dgl7533w.melbetir.bet/?ublib=bdca0d5f-c783-454c-9977-b1b1f243c1bf']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:05:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884039/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57374c50-66de-59c6-a1c3-c9ab5813421f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.87.30.92:47241/i",
      "pattern": "[url:value = 'http://39.87.30.92:47241/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:01:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884038/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0003ce6-3618-5adc-be91-f3de639b0e55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.44.136.115:60710/i",
      "pattern": "[url:value = 'http://103.44.136.115:60710/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T20:00:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884037/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8a53aa8-28d5-518b-8689-f5287e1824e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.157.9:55135/i",
      "pattern": "[url:value = 'http://42.239.157.9:55135/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:45:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884036/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1061b0d-de58-5cdc-830f-9a0b359a2797",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qakm.fiorentini.ir/5a5d55ff-f17c-4ebb-80f3-fabfe639e949",
      "pattern": "[url:value = 'https://qakm.fiorentini.ir/5a5d55ff-f17c-4ebb-80f3-fabfe639e949']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:36:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884035/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e93f5bf-80a2-5126-b943-ab2bdff249a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_8ae360959a1933a5.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_8ae360959a1933a5.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:29:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884034/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82a9a370-845b-51ac-85f3-774020a01a7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.163.18:39646/i",
      "pattern": "[url:value = 'http://115.48.163.18:39646/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:28:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884033/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1eaa6ad5-76f8-5805-852b-53e7332302eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.239.102.152:57314/bin.sh",
      "pattern": "[url:value = 'http://112.239.102.152:57314/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:27:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884032/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--200570db-7e6f-5697-bde8-055e6469316b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zvulhavn.elitesport.ir/dc406432-f59e-40cf-88ad-e9bca504fc83",
      "pattern": "[url:value = 'https://zvulhavn.elitesport.ir/dc406432-f59e-40cf-88ad-e9bca504fc83']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:24:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884031/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efab57ef-c4a2-565b-86d5-c57ad519fe5e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.239.157.9:55135/bin.sh",
      "pattern": "[url:value = 'http://42.239.157.9:55135/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:17:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884030/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59d69c59-0a9b-54d2-811a-43488c676b9b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.4.89:53768/i",
      "pattern": "[url:value = 'http://110.36.4.89:53768/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:09:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884029/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad6e871b-d352-5131-beb0-3d175b05757f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://162.255.251.91:33439/i",
      "pattern": "[url:value = 'http://162.255.251.91:33439/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T19:03:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884028/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbd867b5-c6d5-5a54-a2f7-16ad1e8951fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.135.42.30:53519/i",
      "pattern": "[url:value = 'http://220.135.42.30:53519/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:53:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884027/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc66729a-f2d7-5640-8f26-507d03b51260",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.63.230.109:35501/i",
      "pattern": "[url:value = 'http://115.63.230.109:35501/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:49:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884026/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9ced5ea-b158-5342-baad-1a5a75ca96ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.167.229.94:27250/i",
      "pattern": "[url:value = 'http://5.167.229.94:27250/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884025/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8c12a09-16e3-5839-99b7-4b94f2d5b448",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.61.209:54559/i",
      "pattern": "[url:value = 'http://61.52.61.209:54559/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:44:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884024/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84c28b74-ed78-58db-899c-fed73096a3a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://gtv6eszx.riskybet.casino/?ublib=c153430f-e97d-44f8-900b-5ae7b49d91be",
      "pattern": "[url:value = 'https://gtv6eszx.riskybet.casino/?ublib=c153430f-e97d-44f8-900b-5ae7b49d91be']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884023/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d2c5ff0-15b9-561f-bfde-05e6348f593d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.9.104.69:34901/i",
      "pattern": "[url:value = 'http://123.9.104.69:34901/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:43:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884022/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07734843-c473-59a8-a0e4-1a616faf0fb7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.4.89:53768/bin.sh",
      "pattern": "[url:value = 'http://110.36.4.89:53768/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884021/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fda9591-deb7-52e8-9808-41e2637f5e4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://162.255.251.91:33439/bin.sh",
      "pattern": "[url:value = 'http://162.255.251.91:33439/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:40:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884020/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ec8fefc-12d8-5581-8300-782dc4e528a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ultimatebodyrecovery.com/",
      "pattern": "[url:value = 'https://ultimatebodyrecovery.com/']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:36:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884019/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a2ef55e-be76-5b38-b2be-fe3e725fbfc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kaloed.pro/1e523332.exe",
      "pattern": "[url:value = 'https://kaloed.pro/1e523332.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:36:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884018/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c420bcf-09c2-501d-973f-26aa43ea2757",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://154.217.249.247:9004/bot.sh",
      "pattern": "[url:value = 'http://154.217.249.247:9004/bot.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884017/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d481cf94-eebc-56bd-ab64-20293a107f68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jrudq.ganj.bet/34a03c7c-ee45-4baa-8ba5-4c07ee06d1a5",
      "pattern": "[url:value = 'https://jrudq.ganj.bet/34a03c7c-ee45-4baa-8ba5-4c07ee06d1a5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884016/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97d21c23-11ae-5c72-812c-8a28de0504a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://blhs.20sport.ir/e4f17ac4-8903-4ec0-aa5f-85aa252a42bc",
      "pattern": "[url:value = 'https://blhs.20sport.ir/e4f17ac4-8903-4ec0-aa5f-85aa252a42bc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:33:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884015/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0324eaf7-ddec-5ea4-a309-2f742f9bb493",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.9.104.69:34901/bin.sh",
      "pattern": "[url:value = 'http://123.9.104.69:34901/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:32:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884014/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3be1849-656f-5b87-a84b-9b6292d156f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mbifcxdz.careeriran.ir/37bb9b34-9138-47ee-a6bc-bc4ba8156633",
      "pattern": "[url:value = 'https://mbifcxdz.careeriran.ir/37bb9b34-9138-47ee-a6bc-bc4ba8156633']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884013/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29a99b28-b1a9-54e3-b78d-bdb358828165",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://220.135.42.30:53519/bin.sh",
      "pattern": "[url:value = 'http://220.135.42.30:53519/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:24:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884012/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef6280f0-1cab-51b0-afc1-64f13a16e5f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.176.4.229:58811/i",
      "pattern": "[url:value = 'http://60.176.4.229:58811/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:16:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884011/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d49ed57-d05b-56f5-b9c1-855043939adf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lddwegnb.ketabworld.ir/?ublib=f5a9f75c-5ba4-4f9f-a0f8-f2d044dc3b13",
      "pattern": "[url:value = 'https://lddwegnb.ketabworld.ir/?ublib=f5a9f75c-5ba4-4f9f-a0f8-f2d044dc3b13']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884010/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26efbe6a-24d8-54c5-8508-b20c379dc234",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.124.126.196:40819/i",
      "pattern": "[url:value = 'http://182.124.126.196:40819/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:12:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884009/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--887d67f0-ed4e-5f70-86f6-38c372037bb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_b66749d846629102.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_b66749d846629102.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T18:05:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884008/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fed4469e-90f2-504a-b1e1-29bcc85f8833",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.73.108.18:46667/i",
      "pattern": "[url:value = 'http://39.73.108.18:46667/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:58:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884007/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16af30fe-62b1-5fc4-9459-24a68ddc8423",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.224.33.217:41583/i",
      "pattern": "[url:value = 'http://105.224.33.217:41583/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:55:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884006/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55e48046-c6bc-5c23-bcdd-ddbd23eea965",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.238.254.190:33907/i",
      "pattern": "[url:value = 'http://42.238.254.190:33907/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:48:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884005/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1add24ee-24db-5897-b40f-b703ac0338f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://60.176.4.229:58811/bin.sh",
      "pattern": "[url:value = 'http://60.176.4.229:58811/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:41:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884004/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed8bf732-5526-5de7-a3a7-74b8d88a9bde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rcodtjdj.melbetiran.bet/89f5b321-1eca-4e6f-92d4-9b19eade73c1",
      "pattern": "[url:value = 'https://rcodtjdj.melbetiran.bet/89f5b321-1eca-4e6f-92d4-9b19eade73c1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884003/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ab3a850-4243-5a21-ba49-389ab5ed7238",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.224.33.217:41583/bin.sh",
      "pattern": "[url:value = 'http://105.224.33.217:41583/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:31:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884002/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58dbde81-22e9-5149-baec-bd991c469753",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.12.240.37:49403/i",
      "pattern": "[url:value = 'http://123.12.240.37:49403/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:31:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884001/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a3ffce1-d857-5c2b-bbc9-4de1426306e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_55c1b708fcd2591a.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_55c1b708fcd2591a.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:30:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3884000/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6018d16d-d008-509e-bfd1-ef888209d704",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.232.228.31:53154/bin.sh",
      "pattern": "[url:value = 'http://42.232.228.31:53154/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883999/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44f7ace8-fc4b-5f78-8496-b77b6406a688",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://aafnojwq.megashart.blog/f49b548a-b94f-4b4e-8be9-466375601547",
      "pattern": "[url:value = 'https://aafnojwq.megashart.blog/f49b548a-b94f-4b4e-8be9-466375601547']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:14:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883998/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0254c228-9d5f-5789-ac8e-d83e4284d537",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.238.254.190:33907/bin.sh",
      "pattern": "[url:value = 'http://42.238.254.190:33907/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:07:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883997/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b549c9f4-8b8f-5e9a-971e-c67c1c395010",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.39.238.66:42378/i",
      "pattern": "[url:value = 'http://110.39.238.66:42378/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883996/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2262096e-0b8f-51df-8f3f-7225ab8818bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.12.240.37:49403/bin.sh",
      "pattern": "[url:value = 'http://123.12.240.37:49403/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T17:02:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883995/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f83464d-a75a-5c36-9615-5132382d9b06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.47.54:36456/bin.sh",
      "pattern": "[url:value = 'http://61.52.47.54:36456/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:59:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883994/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c26f371d-7f3c-53e4-9acf-67835b96aa94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://etorvugt.betsher.casino/a3b48ce8-7a40-45dd-b296-086371b090c1",
      "pattern": "[url:value = 'https://etorvugt.betsher.casino/a3b48ce8-7a40-45dd-b296-086371b090c1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883993/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccf6d934-a664-5b50-adcb-8656de1080e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_a412f485ab9549f8.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_a412f485ab9549f8.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:54:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883992/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b2b54b7-7aa0-5fc3-a7d1-3efecbe4006d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.153.196.115:50179/i",
      "pattern": "[url:value = 'http://27.153.196.115:50179/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:48:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883991/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3139da79-28f0-5775-b46c-5ef2c0f52b5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wrov.betfa.download/b2d96a4f-c10a-4838-a7f2-e91073c177f7",
      "pattern": "[url:value = 'https://wrov.betfa.download/b2d96a4f-c10a-4838-a7f2-e91073c177f7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:48:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883990/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--305e1ab7-0429-5cfc-b894-8b59f5a43eb7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://109.236.44.113:54968/i",
      "pattern": "[url:value = 'http://109.236.44.113:54968/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:47:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883989/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2787704d-f52f-5c8f-82e7-f20228ac1cf4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://216.126.86.26:36797/i",
      "pattern": "[url:value = 'http://216.126.86.26:36797/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:42:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883988/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5e11029-cae5-558a-af61-743e00700d94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://4lbsgx9v.powershart.com/?ublib=f48b9f35-70d2-4336-ab34-093691f3d405",
      "pattern": "[url:value = 'https://4lbsgx9v.powershart.com/?ublib=f48b9f35-70d2-4336-ab34-093691f3d405']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:41:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883987/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40364656-4893-51d3-995b-896d58d51b0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.93.137.16:35671/i",
      "pattern": "[url:value = 'http://112.93.137.16:35671/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:31:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883986/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc056f30-a552-56e8-b178-2bc44f187632",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://instnhvy.melbetiran.bet/2ef02074-58d8-41f3-849b-ce8880aeda06",
      "pattern": "[url:value = 'https://instnhvy.melbetiran.bet/2ef02074-58d8-41f3-849b-ce8880aeda06']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:25:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883985/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e106d996-772b-59e2-8637-13ac832080da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.102.129:42317/i",
      "pattern": "[url:value = 'http://110.37.102.129:42317/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:19:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883984/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02c25aad-a3ac-5915-b9c5-eb9fd360ccb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://109.236.44.113:54968/bin.sh",
      "pattern": "[url:value = 'http://109.236.44.113:54968/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:19:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883983/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd9de603-88f6-5184-8a76-89cc0109b4b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.153.196.115:50179/bin.sh",
      "pattern": "[url:value = 'http://27.153.196.115:50179/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:18:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883982/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39d0aeca-7ae1-5c6d-8f59-d2203a76b8ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.4.238.122:50867/i",
      "pattern": "[url:value = 'http://123.4.238.122:50867/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:07:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883981/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fc1d6ca-d5f8-5cc0-abea-6c3b34c5cf9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://188.19.147.138:45305/i",
      "pattern": "[url:value = 'http://188.19.147.138:45305/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T16:02:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883980/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06cd8d5b-a498-51cb-ad42-68d61de71974",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.231.91.217:53883/i",
      "pattern": "[url:value = 'http://42.231.91.217:53883/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T15:51:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883979/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f98814b-3aab-518c-8698-793069e9dbe8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://obds.betsher.casino/fc8af826-5165-4842-9400-18685b4bc3b8",
      "pattern": "[url:value = 'https://obds.betsher.casino/fc8af826-5165-4842-9400-18685b4bc3b8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T15:50:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883978/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39946de8-59bd-5bcf-8570-43201e442175",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://188.19.147.138:45305/bin.sh",
      "pattern": "[url:value = 'http://188.19.147.138:45305/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T15:26:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883977/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1314c24-c101-5332-9b5e-395b15d7b509",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://xclparsl.megashart.blog/48de669f-81c9-457c-933e-825d43043cba",
      "pattern": "[url:value = 'https://xclparsl.megashart.blog/48de669f-81c9-457c-933e-825d43043cba']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T15:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883976/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--439eb495-f33b-5713-9063-1fe8c4af17ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.7.226.252:39722/bin.sh",
      "pattern": "[url:value = 'http://123.7.226.252:39722/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T15:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883975/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc5ed6dc-ab8e-5c32-91f0-ed0304125d1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_fcf6a02309e203c4.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_fcf6a02309e203c4.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T15:19:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883974/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85308f37-7b38-5e57-93ad-94439750481f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://9c8joror.melbetir.app/?ublib=40129f89-d469-47dc-9ab4-41ea7f4cfd11",
      "pattern": "[url:value = 'https://9c8joror.melbetir.app/?ublib=40129f89-d469-47dc-9ab4-41ea7f4cfd11']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T15:03:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883973/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba113bef-82af-5781-b6d6-85767ae45e0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.4.27:43671/bin.sh",
      "pattern": "[url:value = 'http://182.127.4.27:43671/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:56:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883972/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b272af00-9429-5756-89ab-fdc92732d184",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rmwj.betfa.download/9f165916-880d-43aa-9cc5-c083f2f54619",
      "pattern": "[url:value = 'https://rmwj.betfa.download/9f165916-880d-43aa-9cc5-c083f2f54619']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:53:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883971/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0685662f-f215-5def-ade9-968a0583c51b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.65.212:34828/i",
      "pattern": "[url:value = 'http://110.37.65.212:34828/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:47:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883970/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3567e3b9-5458-5195-97d6-ef22dc63ea99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://d90s0lckjm3qn44hcum01m8hh5cnosj6q.oast.fun",
      "pattern": "[url:value = 'http://d90s0lckjm3qn44hcum01m8hh5cnosj6q.oast.fun']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883968/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb8f9a96-29df-547e-a3a1-f03cddb85241",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://d90s0lckjm3qn44hcum0sidr8j1jfutb5.oast.fun",
      "pattern": "[url:value = 'http://d90s0lckjm3qn44hcum0sidr8j1jfutb5.oast.fun']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883969/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc4b2103-96cd-564e-8651-88191467920c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://103.19.49.134:50928/i",
      "pattern": "[url:value = 'http://103.19.49.134:50928/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:46:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883967/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3dc53e8a-7065-5ba6-90cb-e97039f09c21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.240.206.31:53993/i",
      "pattern": "[url:value = 'http://112.240.206.31:53993/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:38:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883966/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f50354f-d57f-526b-b43a-d229b9f1ade2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://8n2r77nt.app888starz.download/?ublib=5b7fca65-4845-4e7f-a9b2-52a0c57c478d",
      "pattern": "[url:value = 'https://8n2r77nt.app888starz.download/?ublib=5b7fca65-4845-4e7f-a9b2-52a0c57c478d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:38:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883965/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c985a30-ec0d-51d2-995f-b65a5e744f38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://zqjjyamd.megaparifarsi.com/172da6e7-0589-48bb-a507-ea3381cfd8e3",
      "pattern": "[url:value = 'https://zqjjyamd.megaparifarsi.com/172da6e7-0589-48bb-a507-ea3381cfd8e3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883964/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e05d0ccd-942b-571f-b85f-d4cb4d1d2ba9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.225.113.253:36827/i",
      "pattern": "[url:value = 'http://105.225.113.253:36827/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:19:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883963/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--194fb17e-f669-5f83-aca2-3f17ae5187cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.65.212:34828/bin.sh",
      "pattern": "[url:value = 'http://110.37.65.212:34828/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:15:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883962/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75841e81-4069-5f5a-8a44-4c266ee7c1d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.225.113.253:36827/bin.sh",
      "pattern": "[url:value = 'http://105.225.113.253:36827/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T14:00:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883961/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4d610b2-a34a-5a98-8470-a3999d9a0e60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cabv.bet24.casino/3dd522a2-da78-451c-800e-9cc1e5067d3d",
      "pattern": "[url:value = 'https://cabv.bet24.casino/3dd522a2-da78-451c-800e-9cc1e5067d3d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:57:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883960/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--deb317af-8ebc-53ae-a023-bed4173a6680",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.14.97:44539/i",
      "pattern": "[url:value = 'http://115.48.14.97:44539/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:56:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883959/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3abe9f9-3c08-5c53-9122-208bbfab8072",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.53.206.243:54006/i",
      "pattern": "[url:value = 'http://61.53.206.243:54006/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:54:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883958/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e610c1c0-02fd-547f-9dab-3579c352bcc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.78.136:39827/i",
      "pattern": "[url:value = 'http://61.52.78.136:39827/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:45:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883957/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--593e6400-af80-5188-9b08-ab2b20ad29e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.123.245.187:35967/i",
      "pattern": "[url:value = 'http://182.123.245.187:35967/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:38:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883956/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be893ec8-176b-5a87-ab5f-b56958979e70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://verify.hashtopoils.org/verify_amd",
      "pattern": "[url:value = 'https://verify.hashtopoils.org/verify_amd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:34:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883954/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2be28fa0-fad4-58db-aa72-8ec3f144ef64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://verify.hashtopoils.org/verify_arm",
      "pattern": "[url:value = 'https://verify.hashtopoils.org/verify_arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:34:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883955/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df2c7024-fbe6-577a-ac12-b496831d1d56",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_da8de9dae556667a.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_da8de9dae556667a.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:34:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883953/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13057f99-f7e5-55d9-a24d-aaa59a07c7b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.48.14.97:44539/bin.sh",
      "pattern": "[url:value = 'http://115.48.14.97:44539/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:34:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883952/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c64220f1-a0b8-5f1f-9f03-57d13d95dd70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.52.78.136:39827/bin.sh",
      "pattern": "[url:value = 'http://61.52.78.136:39827/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:18:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883951/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3721343d-6274-598a-954c-15ab9e2ab7cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.240.206.31:53993/bin.sh",
      "pattern": "[url:value = 'http://112.240.206.31:53993/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:15:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883950/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--886a1467-042b-50bb-bca3-41606b161fae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sjgejs29.itsport.ir/?ublib=8fa80e70-e96f-476f-a95c-1f8e55f3aca7",
      "pattern": "[url:value = 'https://sjgejs29.itsport.ir/?ublib=8fa80e70-e96f-476f-a95c-1f8e55f3aca7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883949/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--215ce14e-9f67-5016-a0e1-3edae2c7656f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://emtd.bcgame90.casino/c7c1897d-a4af-4f02-8b90-aeac3bcf3605",
      "pattern": "[url:value = 'https://emtd.bcgame90.casino/c7c1897d-a4af-4f02-8b90-aeac3bcf3605']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T13:02:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883948/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dd7c5ed-a628-5e93-a7df-3cc263b6683a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.123.245.187:35967/bin.sh",
      "pattern": "[url:value = 'http://182.123.245.187:35967/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:52:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883947/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5c1ff71-a6b8-522c-9535-2a224b3f0cc3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://125.44.217.16:45814/i",
      "pattern": "[url:value = 'http://125.44.217.16:45814/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:50:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883946/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--759d7aec-e691-561d-bca6-56eaa5ad1ce7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://130.0.44.29:48255/bin.sh",
      "pattern": "[url:value = 'http://130.0.44.29:48255/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:46:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883945/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cddd074e-f51d-5b84-b724-3a35410b84d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.7.226.252:39722/i",
      "pattern": "[url:value = 'http://123.7.226.252:39722/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883944/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f040104-4bef-5d8c-9326-0e14bd113899",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mpv5bjr9.yasbet.co/?ublib=f8d69c4c-7b1b-4c29-aa75-afdbd96d3564",
      "pattern": "[url:value = 'https://mpv5bjr9.yasbet.co/?ublib=f8d69c4c-7b1b-4c29-aa75-afdbd96d3564']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883943/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--494c8401-959f-5474-b4d3-13b9f4852488",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.140/files/7048186296/Gy41y7O.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/7048186296/Gy41y7O.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:17:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883942/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4d2eca5-18c7-56ef-abef-326ae8af18be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://218.59.14.73:36944/i",
      "pattern": "[url:value = 'http://218.59.14.73:36944/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:13:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883941/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20f760ce-eb02-5210-9843-54ebfcd51348",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dcaxdwoo.barcelona11.com/da80530e-3180-4285-baf9-881e2e039c83",
      "pattern": "[url:value = 'https://dcaxdwoo.barcelona11.com/da80530e-3180-4285-baf9-881e2e039c83']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:13:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883940/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51d15550-ade0-5cd6-abbe-b3403f71a34d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ztop.hazzaratbet.com/506a48ad-9522-4a9d-b741-4d8aaf9e7a59",
      "pattern": "[url:value = 'https://ztop.hazzaratbet.com/506a48ad-9522-4a9d-b741-4d8aaf9e7a59']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883939/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04a8f064-9706-5da1-9233-6715af208f9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://208.85.17.8/api/payload.sh",
      "pattern": "[url:value = 'http://208.85.17.8/api/payload.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:09:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883938/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ec54904-b21a-550d-bfe0-92e4498aab19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.161.211:52847/i",
      "pattern": "[url:value = 'http://222.137.161.211:52847/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T12:07:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883937/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17518cd3-0b35-57db-81f3-ed6453077595",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.69.1:59335/i",
      "pattern": "[url:value = 'http://115.50.69.1:59335/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:46:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883936/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--576d9712-82c4-590d-9b28-f5d86f01ccdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.161.211:52847/bin.sh",
      "pattern": "[url:value = 'http://222.137.161.211:52847/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:45:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883935/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f414cd1-c11f-5434-ad9c-e1ae084b9490",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://218.59.14.73:36944/bin.sh",
      "pattern": "[url:value = 'http://218.59.14.73:36944/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:45:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883934/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b8a9703-768b-596e-a156-847ae2495bdd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://toonhymp.barcelona11.com/77f467b3-2f80-4605-98e9-c9a7ad320f85",
      "pattern": "[url:value = 'https://toonhymp.barcelona11.com/77f467b3-2f80-4605-98e9-c9a7ad320f85']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:42:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883933/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ddf0ccd-c059-5111-a422-6e2800604a34",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.190.61.94:29420/i",
      "pattern": "[url:value = 'http://113.190.61.94:29420/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:31:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883932/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0ee1027-2a48-51fa-840e-258d4d88c670",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.235.181.25:38851/i",
      "pattern": "[url:value = 'http://42.235.181.25:38851/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:20:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883931/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--254f85cc-20c9-56b5-8fe8-34b2bb894f9b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://eluk.hazzaratbet.com/66b34559-2dd8-472a-b900-17481638eb05",
      "pattern": "[url:value = 'https://eluk.hazzaratbet.com/66b34559-2dd8-472a-b900-17481638eb05']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:18:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883930/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac986938-d076-5003-8d4c-a5dce27b2de5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-b156ef7b8e9141738331d7cd7868c327.r2.dev/output.bat",
      "pattern": "[url:value = 'https://pub-b156ef7b8e9141738331d7cd7868c327.r2.dev/output.bat']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:15:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883928/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--035556ad-28fa-5ac2-b537-7875e9f0d28b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://i.ibb.co/3ynnQmxB/c1A.png",
      "pattern": "[url:value = 'https://i.ibb.co/3ynnQmxB/c1A.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:15:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883929/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe7a1fd8-0c18-5760-8931-ce791115d4b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.190.61.94:29420/bin.sh",
      "pattern": "[url:value = 'http://113.190.61.94:29420/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T11:04:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883927/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--754e5f0a-3877-51ba-b04d-308654837ad4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.186.143.79:49489/bin.sh",
      "pattern": "[url:value = 'http://105.186.143.79:49489/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:56:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883926/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27c2f204-334e-5360-b109-e6e71767822f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.235.181.25:38851/bin.sh",
      "pattern": "[url:value = 'http://42.235.181.25:38851/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883925/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08942afc-657f-507f-829d-c57dcb0b20c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.207.228.158:46589/i",
      "pattern": "[url:value = 'http://27.207.228.158:46589/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:46:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883923/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea890f99-5a7c-5019-9df8-0c51e09cfb6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.92.59:56422/i",
      "pattern": "[url:value = 'http://163.142.92.59:56422/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:46:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883924/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f14f1ca-70f9-539a-8081-c99b5a253b18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.57:42371/i",
      "pattern": "[url:value = 'http://200.112.129.57:42371/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:43:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883922/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f9ef548-c783-5b38-b3bc-4b7567426c8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hvaujhmz.alhilal90.com/053c7321-7980-41f5-ae96-c0de156094da",
      "pattern": "[url:value = 'https://hvaujhmz.alhilal90.com/053c7321-7980-41f5-ae96-c0de156094da']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883921/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fae4888-7d2a-53c8-a6fb-bb6bfc1717f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://108.170.136.155:37272/i",
      "pattern": "[url:value = 'http://108.170.136.155:37272/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883920/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b768ce85-3913-573b-8083-703835e2b372",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qee052b3.irantop.bet/?ublib=387ccab7-95c0-4bd8-92e4-9265942c14d8",
      "pattern": "[url:value = 'https://qee052b3.irantop.bet/?ublib=387ccab7-95c0-4bd8-92e4-9265942c14d8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:36:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883919/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--223136f3-29a4-5d52-bb70-fa87bc8920e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://donutcash.lol/Prestige-Client.exe",
      "pattern": "[url:value = 'https://donutcash.lol/Prestige-Client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:34:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883918/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--538bb8d2-94f5-5d41-89da-f9b4eca48b26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.116.51.13:39041/i",
      "pattern": "[url:value = 'http://182.116.51.13:39041/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:32:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883917/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3a54c60-d990-56c7-aaeb-411e2ce21bc7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.136.52.228:56020/bin.sh",
      "pattern": "[url:value = 'http://222.136.52.228:56020/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:25:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883916/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97fce4bc-554a-5d6a-a33c-e3167b6e969e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://bwup.catsandcarp.com/2af7d0f8-d488-4646-9d1e-ad290a2df45a",
      "pattern": "[url:value = 'https://bwup.catsandcarp.com/2af7d0f8-d488-4646-9d1e-ad290a2df45a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883915/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dac7119-6074-513c-ae6e-eec9eaa1c362",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.95.89:43256/i",
      "pattern": "[url:value = 'http://163.142.95.89:43256/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883914/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ef1e078-968e-53ad-9f50-37b4db9e12bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://200.112.129.57:42371/bin.sh",
      "pattern": "[url:value = 'http://200.112.129.57:42371/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:17:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883913/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8481f30d-6fea-5a44-95fc-76003e7e41af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.4.27:43671/i",
      "pattern": "[url:value = 'http://182.127.4.27:43671/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:17:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883912/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19967d95-5b92-59e8-a7ae-54db426083a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.122.76:43722/i",
      "pattern": "[url:value = 'http://222.141.122.76:43722/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883911/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67ae13bc-315c-581b-8dff-222f4946b6b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://108.170.136.155:37272/bin.sh",
      "pattern": "[url:value = 'http://108.170.136.155:37272/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:12:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883910/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34aac609-380d-5d81-bd4b-a1f334d2bb69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.89.156:57932/i",
      "pattern": "[url:value = 'http://42.224.89.156:57932/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:04:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883909/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f24a106a-d0f9-5fc2-b0ae-e1b0d214721e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://2766iljo.melbetiran.poker/?ublib=105c4669-6188-45e1-9feb-ff87e61450e3",
      "pattern": "[url:value = 'https://2766iljo.melbetiran.poker/?ublib=105c4669-6188-45e1-9feb-ff87e61450e3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:02:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883908/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ff1bf63-9df3-55c1-8ade-77d22063bfab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.224.89.156:57932/bin.sh",
      "pattern": "[url:value = 'http://42.224.89.156:57932/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T10:01:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883907/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--128d7e4e-3f3b-596c-8c69-4a6779806be7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.186.143.79:49489/i",
      "pattern": "[url:value = 'http://105.186.143.79:49489/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:57:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883906/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf072138-d111-5b05-8fa3-daa6c3c79bd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.95.89:43256/bin.sh",
      "pattern": "[url:value = 'http://163.142.95.89:43256/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:54:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883905/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17bf8337-cb9f-5a6b-bceb-c5b06688f08f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://3w6k8hlt.pinbahis.bet/?ublib=2c82e7ff-387f-43fe-bcd1-51c1395115f4",
      "pattern": "[url:value = 'https://3w6k8hlt.pinbahis.bet/?ublib=2c82e7ff-387f-43fe-bcd1-51c1395115f4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883904/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6b0b5b6-767a-5f23-97d9-cfaa7b9b822f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.219.127:41338/i",
      "pattern": "[url:value = 'http://123.14.219.127:41338/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:45:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883903/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08861ec4-0a20-5f09-af51-24d8c1ca08b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://218.61.126.54:57066/i",
      "pattern": "[url:value = 'http://218.61.126.54:57066/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:33:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883902/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25ffa2fa-2ebc-5009-873a-c572f180504c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://phcwqqkr.1xgermany.com/d2b282f1-b951-4e49-8364-6d87897cc80f",
      "pattern": "[url:value = 'https://phcwqqkr.1xgermany.com/d2b282f1-b951-4e49-8364-6d87897cc80f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:31:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883901/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eedb921-1487-5715-bc43-ff33256c74f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ykgl.calvaryhospice.org/5468cbb5-9b09-40a6-8515-0bdcdd62b0cb",
      "pattern": "[url:value = 'https://ykgl.calvaryhospice.org/5468cbb5-9b09-40a6-8515-0bdcdd62b0cb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883900/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cfc89f5-fcad-55e0-82f8-358d6b614ce5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.11.77.40:40335/bin.sh",
      "pattern": "[url:value = 'http://123.11.77.40:40335/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:22:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883899/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb9f97b2-b9ac-579f-8729-4fbd8f4187a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.219.127:41338/bin.sh",
      "pattern": "[url:value = 'http://123.14.219.127:41338/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883898/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b3e9f30-8b6b-56f7-8628-d09a71b47e40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.147.243.250:35517/i",
      "pattern": "[url:value = 'http://175.147.243.250:35517/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T09:13:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883897/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1e2f222-6394-5ada-ab5f-eba2c65621c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.194.87:46521/i",
      "pattern": "[url:value = 'http://182.126.194.87:46521/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883896/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--648e1328-5237-5ef0-9617-436b02c25cac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.90.163.37/GOONGANGONTOP/i468",
      "pattern": "[url:value = 'http://45.90.163.37/GOONGANGONTOP/i468']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:55:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883895/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4f5f233-a43f-508c-b3c4-cae5c3696ed8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://112.93.137.16:35671/bin.sh",
      "pattern": "[url:value = 'http://112.93.137.16:35671/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:49:47Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883894/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--562d693b-6127-56d5-9963-3ebc18397565",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://223.10.4.70:55867/bin.sh",
      "pattern": "[url:value = 'http://223.10.4.70:55867/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:47:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883893/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccc2368e-fc96-5ea7-98fe-e42cbfca9727",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.5.158.194:57168/bin.sh",
      "pattern": "[url:value = 'http://123.5.158.194:57168/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883892/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17d72556-3bd0-5451-be35-b0aefc972e0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://errxxcnl.gamee.bet/70738f5e-4f31-4119-b124-a45974b35888",
      "pattern": "[url:value = 'https://errxxcnl.gamee.bet/70738f5e-4f31-4119-b124-a45974b35888']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883891/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e8ac4cf-15a5-51e8-af7b-7d9a682c9311",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vj7eaayr.fa1xbet.vip/?ublib=7d3d7529-c27d-40be-b74a-3177bddd906d",
      "pattern": "[url:value = 'https://vj7eaayr.fa1xbet.vip/?ublib=7d3d7529-c27d-40be-b74a-3177bddd906d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:34:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883890/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09497d91-61e4-5b63-95af-48f7ca214b55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://kqbtsllu.1xgame.pro/7df7b7fe-ab25-4c20-b375-43f1e4c1eb41",
      "pattern": "[url:value = 'https://kqbtsllu.1xgame.pro/7df7b7fe-ab25-4c20-b375-43f1e4c1eb41']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883889/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da3fa353-2143-5f6c-be4a-8dcdbff729dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://obuf.betawarz.com/275fec36-f843-46b7-9adb-43ddeb837b10",
      "pattern": "[url:value = 'https://obuf.betawarz.com/275fec36-f843-46b7-9adb-43ddeb837b10']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:31:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883888/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9586c0d-91d7-5bcd-ae90-0f59758223b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.194.87:46521/bin.sh",
      "pattern": "[url:value = 'http://182.126.194.87:46521/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:26:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883887/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd6ca091-0837-5031-a6a6-f9212d543466",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://221.15.20.68:48684/bin.sh",
      "pattern": "[url:value = 'http://221.15.20.68:48684/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:25:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883886/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7db9353-f287-5e17-8be9-e1a9d3a276d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.93.90:45440/bin.sh",
      "pattern": "[url:value = 'http://163.142.93.90:45440/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T08:17:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883885/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9628dc85-5326-5e5e-8089-bc3339686181",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://187.121.141.137:59432/i",
      "pattern": "[url:value = 'http://187.121.141.137:59432/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:57:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883884/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--740cea92-8155-548a-b6e2-f1b1ad6604ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fezk.polbaz.bet/48d045e7-7562-43ed-a88a-ea1e6d5a6f9d",
      "pattern": "[url:value = 'https://fezk.polbaz.bet/48d045e7-7562-43ed-a88a-ea1e6d5a6f9d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883883/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae4d3237-0ce8-5caa-be7f-75e4174b10d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://77.247.88.83:46373/bin.sh",
      "pattern": "[url:value = 'http://77.247.88.83:46373/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:50:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883882/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33dd180b-b2c8-5d02-9764-9de8b3efd673",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://219.156.60.141:46448/i",
      "pattern": "[url:value = 'http://219.156.60.141:46448/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:43:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883881/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e037296b-e862-50bb-9165-e5899c701b20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://83.219.1.198:42561/i",
      "pattern": "[url:value = 'http://83.219.1.198:42561/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:15:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883880/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--650077c5-0983-503f-9640-d9a57c464dca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://tiduflxx.farsi1xbet.shop/8d25635e-11c6-43b3-9d66-4a95eb45e11c",
      "pattern": "[url:value = 'https://tiduflxx.farsi1xbet.shop/8d25635e-11c6-43b3-9d66-4a95eb45e11c']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883879/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd64d8ae-4534-5759-9ecd-01202e8a0c89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.39.239.253:40635/i",
      "pattern": "[url:value = 'http://110.39.239.253:40635/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:09:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883878/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c136cf53-43a5-5e0f-ba1e-3f5e41f4d5de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://srgq.icebet90.com/5c2f6eef-2d2d-4cc8-b668-0d8549e18eb9",
      "pattern": "[url:value = 'https://srgq.icebet90.com/5c2f6eef-2d2d-4cc8-b668-0d8549e18eb9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T07:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883877/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe541421-2a5a-501c-9b18-add107b45eb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/init.sh",
      "pattern": "[url:value = 'http://91.92.40.118/init.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:56:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883876/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e496c35-6f58-5e85-ac16-44f4af5af847",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_150a4c9b22b37ebe.ps1",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_150a4c9b22b37ebe.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883872/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--953ee216-32f0-5be4-92ce-269efbb89e82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_6d9d8fc309228ece.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_6d9d8fc309228ece.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883873/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd10f373-a6e2-5011-8370-ac3861d7b7a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_a3af4669c51aa82d.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_a3af4669c51aa82d.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883874/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--510738cb-4958-539f-92fe-6c211eff8aee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_3e7393fd5c99d55c.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_3e7393fd5c99d55c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883875/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1073e275-32bc-5103-9d22-3f6f5f1829bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pub-61124cd6b14a43ab85c051bf3b7bf33f.r2.dev/Semoklu.msi",
      "pattern": "[url:value = 'https://pub-61124cd6b14a43ab85c051bf3b7bf33f.r2.dev/Semoklu.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:55:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883870/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccbbfe84-1b7a-51da-a6a1-a746b7517e87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://d90s0lckjm3qn44hcum0r44ejdsrc3ke3.oast.fun",
      "pattern": "[url:value = 'http://d90s0lckjm3qn44hcum0r44ejdsrc3ke3.oast.fun']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:55:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883871/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbe97ce6-c8a7-5e33-98e1-1ae3614b7a4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://d90s0lckjm3qn44hcum0ejhp587m6s5xc.oast.fun",
      "pattern": "[url:value = 'http://d90s0lckjm3qn44hcum0ejhp587m6s5xc.oast.fun']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:55:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883869/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--987e8adf-8da8-5bc5-9a11-135be7321ecd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://join-google-meet.com/download.php",
      "pattern": "[url:value = 'https://join-google-meet.com/download.php']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:55:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883868/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac8b963a-79cc-5c34-bdbf-c71dadcd4a7f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_447e39c0c96b3cb5.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_447e39c0c96b3cb5.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883865/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8eb2be50-9801-5df5-ac8d-8ca096012fd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_1054d1bff4b2c953.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_1054d1bff4b2c953.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883866/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0dcff84-ea1a-5dbb-a1ca-f51abc814781",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_93d3d417921c3a69.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_93d3d417921c3a69.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883867/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f3d56f7-7566-58ef-ba55-83540c8adb16",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.mpsl",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883864/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--175811a0-d7cf-5630-b7ae-592fbeff4985",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.x86_64",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883862/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e44f7a31-b5bb-50ac-8807-bf7d8691c159",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.arm7",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883863/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd518b33-d9cc-52a0-a451-3e363781425c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.mips",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883861/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5e8499d-68f2-5a30-829f-0b55613f134c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.sh4",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883860/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--436a40d5-2986-5c2b-bb6c-270077ea3bc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.spc",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883853/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c42c8dbb-64fc-5cda-9819-157602302f70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.m68k",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883854/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06f95e3f-8dfa-5575-8c41-37b3b7fba52e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.x86",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883855/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94499afd-b217-5561-ad2f-342ec23ff059",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.ppc",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883856/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc8b88a4-f154-51b9-a0e8-8b9be9bd7167",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.arm",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883857/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2fb1a80-2de8-5c8a-a793-fcb266067d72",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.arm5",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883858/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5468368-1117-50bb-a0e8-4716c3ed7518",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://141.11.88.126/bins/sora.arm6",
      "pattern": "[url:value = 'http://141.11.88.126/bins/sora.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883859/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca14147f-2871-545e-a3fd-8deaba751077",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://desentupidora.pro.br/assets/MSI_PRODJ5TH.png",
      "pattern": "[url:value = 'https://desentupidora.pro.br/assets/MSI_PRODJ5TH.png']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:51:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883852/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e282b74d-dc56-5585-9ee9-9a47ea988d90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.9.240.142:42978/i",
      "pattern": "[url:value = 'http://113.9.240.142:42978/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:50:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883851/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5dba291-26b4-53cf-850e-4040fc1b9447",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://83.219.1.198:42561/bin.sh",
      "pattern": "[url:value = 'http://83.219.1.198:42561/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:49:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883850/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec212f49-806d-5eac-9c38-42fc1ba20ad1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://113.9.240.142:42978/bin.sh",
      "pattern": "[url:value = 'http://113.9.240.142:42978/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:48:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883849/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99de9517-6ffc-5d6b-8279-97c475d501df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.86.113.243:40712/i",
      "pattern": "[url:value = 'http://42.86.113.243:40712/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883848/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--795a2d6f-d563-5ba0-b5aa-868971c012cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pastefy.app/2UAyY6A9/raw",
      "pattern": "[url:value = 'https://pastefy.app/2UAyY6A9/raw']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:43:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883847/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d0e29d1-91f3-57c2-892e-93789b9c57be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.61.51.91:46415/i",
      "pattern": "[url:value = 'http://115.61.51.91:46415/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:41:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883846/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--533c2edb-3f22-53d0-b3f8-52df5816b20a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pastefy.app/lBTfY3Xg/raw",
      "pattern": "[url:value = 'https://pastefy.app/lBTfY3Xg/raw']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:40:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883845/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0d226b4-f3d9-5036-93c5-6fc242162a2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://46.217.141.171:6457/.i",
      "pattern": "[url:value = 'http://46.217.141.171:6457/.i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883844/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fad4aea8-3ef2-5c11-a3ce-10535aa1c036",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://a1ukh8ol.cialispi.com/?ublib=24b3d06c-8ce8-4099-940e-1d8af649555a",
      "pattern": "[url:value = 'https://a1ukh8ol.cialispi.com/?ublib=24b3d06c-8ce8-4099-940e-1d8af649555a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883843/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34d5fdf3-2a67-58d9-bfa2-675d5dc268de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://116.139.183.228:43439/bin.sh",
      "pattern": "[url:value = 'http://116.139.183.228:43439/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:18:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883842/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30e20c82-3d89-5764-86a1-5c1654bfb7fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.192.200:33588/i",
      "pattern": "[url:value = 'http://115.55.192.200:33588/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:18:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883841/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccface8b-b24e-5ed0-9cc0-393f18fd3a64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.192.200:33588/bin.sh",
      "pattern": "[url:value = 'http://115.55.192.200:33588/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:16:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883840/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02c997cf-4c18-50cf-ba7d-c99b3e5bbbce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://rbthbhfo.backlinkbet.com/4f5e79ed-eafd-44ff-8f0d-09e1945855a9",
      "pattern": "[url:value = 'https://rbthbhfo.backlinkbet.com/4f5e79ed-eafd-44ff-8f0d-09e1945855a9']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:11:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883839/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9a14d06-8eb1-5d4b-b91d-efc4b55c6456",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.177.183:36148/i",
      "pattern": "[url:value = 'http://115.55.177.183:36148/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:11:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883838/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--893f2d74-bb6c-5885-abac-8f17160c7339",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jrfl.hazzaratbet.com/c5a4f284-e088-4b11-8d91-48fedb48e0ea",
      "pattern": "[url:value = 'https://jrfl.hazzaratbet.com/c5a4f284-e088-4b11-8d91-48fedb48e0ea']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:03:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883837/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3860c407-623c-5d27-ab07-0ce9bba90f6a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_02ab507d3ceeda2d.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_02ab507d3ceeda2d.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883833/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0caf0baf-3373-5f01-8ab0-749a8afdbb8b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_cfd4bfe5de4a0388.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_cfd4bfe5de4a0388.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883834/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ca7bde0-2464-5de1-823d-54daeb929bfa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_adc06bbfce57bc0f.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_adc06bbfce57bc0f.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883835/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50f01797-2011-594e-857a-50f63d05cebe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_3dd5d9273b191b45.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_3dd5d9273b191b45.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883836/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--647dbec4-a438-5094-bba5-23913d48b5fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.78.118:39139/i",
      "pattern": "[url:value = 'http://163.142.78.118:39139/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T06:01:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883832/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f03e01f4-87fb-5d30-9ac8-9e80dc91f350",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://175.167.76.60:53013/bin.sh",
      "pattern": "[url:value = 'http://175.167.76.60:53013/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:50:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883831/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2ae6613-cdda-5a4b-9f63-1a4ca2758b59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_3a1cc00092af29d0.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_3a1cc00092af29d0.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:50:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883830/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c14ef0c-8507-55ba-bf55-2d2acff09dd5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://81.60.210.194:52127/i",
      "pattern": "[url:value = 'http://81.60.210.194:52127/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:45:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883829/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62f04bfc-e5be-5fe3-99c2-7c78fefad5c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://lams.catsandcarp.com/004c8c05-0cdb-4c38-967f-918bccad89e0",
      "pattern": "[url:value = 'https://lams.catsandcarp.com/004c8c05-0cdb-4c38-967f-918bccad89e0']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:41:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883828/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22ae9c28-5ecc-511a-b2f2-79d30eb1e1d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pokese.pro/e6d4638c.exe",
      "pattern": "[url:value = 'https://pokese.pro/e6d4638c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:33:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883827/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf85f611-e938-5e3b-a4c5-b800b684bb8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.78.118:39139/bin.sh",
      "pattern": "[url:value = 'http://163.142.78.118:39139/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883826/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d5ea61e-843c-5a72-bc53-10f8a990e703",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/f92d1b86bac243da86e3290c1907c299.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/f92d1b86bac243da86e3290c1907c299.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883825/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4512d11b-9bfb-550b-9c26-04ae51b73799",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/b7af5ef8c6b24dbc84b18b3ef139cbe2.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/b7af5ef8c6b24dbc84b18b3ef139cbe2.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883822/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e50f922-1d37-55ee-9561-d5a4bafca05a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/480e1d7b7c1f4f86893e91d7297ff652.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/480e1d7b7c1f4f86893e91d7297ff652.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883823/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04753803-d137-5010-860c-94cc5f09cadb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/aa608087adce4522b98fedc62b0de2ee.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/aa608087adce4522b98fedc62b0de2ee.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883824/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba00ac78-19ef-5b13-b10d-7d5de7b9eaaf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/f8238fad9aff45f3a33bf8037a3ca78a.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/f8238fad9aff45f3a33bf8037a3ca78a.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883811/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1db87037-925f-5a58-b782-cae3f11c01d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/c48d8858c31d4439a5a58204effb3d85.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/c48d8858c31d4439a5a58204effb3d85.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883812/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e9c76a2-a78c-5a9f-9569-520c3454fabb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/273a7ebce05249a880abb34ebbb26b14.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/273a7ebce05249a880abb34ebbb26b14.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883813/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1079f01c-eca6-5622-93e6-750b8d45655f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/3bf4d96d7ba74ee7ad4ce7cdea8e7033.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/3bf4d96d7ba74ee7ad4ce7cdea8e7033.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883814/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02d9f5d0-6d70-5770-bc2f-cdd596b83c3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/e36ea4fdb2994fe9b58aaecc72c71f06.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/e36ea4fdb2994fe9b58aaecc72c71f06.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883815/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddcb2161-82ae-54b3-a7cc-50a35c2040f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/ee22c737e8b348d49582f9e1790f134f.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/ee22c737e8b348d49582f9e1790f134f.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883816/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df0657c1-1e95-5720-b14d-e772bcebd10c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/ca089a46f61743cd83884b1577b489ef.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/ca089a46f61743cd83884b1577b489ef.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883817/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36242c04-87e9-5bd4-8bde-005dd2866cb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/ac68a70ed1654d04b29a8985d5ab58e8.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/ac68a70ed1654d04b29a8985d5ab58e8.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883818/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4750ce61-fdb8-5a76-a64e-1bff4ed0be32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/fe9c82f39a8a4fd0b607fac129f59184.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/fe9c82f39a8a4fd0b607fac129f59184.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883819/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16affef9-fcb4-5eef-a289-2de52bdaaf25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/3923ae729e2c4adf85dc26b2db55768a.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/3923ae729e2c4adf85dc26b2db55768a.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883820/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2adf3a7-d051-5c54-bc3c-2a0d1ec07695",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/c61eb43180354427870fc6de651cc63e.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/c61eb43180354427870fc6de651cc63e.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883821/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdf7e9ac-3883-5d76-ad44-64a4a4e3cdc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/4b5b8620309f491789af03500ede5528.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/4b5b8620309f491789af03500ede5528.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883804/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ed22c1a-8cce-5d26-b91a-76a9e199078e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/37ca1ffeb4e14e6f9b4854013b1c4ca5.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/37ca1ffeb4e14e6f9b4854013b1c4ca5.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883805/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52308f44-15b3-5c3b-9fd9-a0212c26f6a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/3f319bcbb3744ae8a49dc54a1b02c02c.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/3f319bcbb3744ae8a49dc54a1b02c02c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883806/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7fecb0d-2284-5c82-a31f-eb91c4a262a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/f0f1d4b4522f4c9f897ac08a4e1d1623.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/f0f1d4b4522f4c9f897ac08a4e1d1623.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883807/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b30f9ac-9004-541b-bd55-8e9a77f05d01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/856f3e600b2c4b4fa31993e52fba8d28.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/856f3e600b2c4b4fa31993e52fba8d28.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883808/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0d5908e-f913-5664-8663-65f4bfa68386",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/9ee3fe2f7fbf467285527df5252d5f04.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/9ee3fe2f7fbf467285527df5252d5f04.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883809/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14e96789-2a0f-5cd7-bc8b-82c65057b7b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/4da769b12f2447869cad2cd0b27b61a9.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/4da769b12f2447869cad2cd0b27b61a9.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883810/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27e2f9a1-2d82-5e45-94aa-9e0e2fac6325",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/85af7d651b5d48ebb2753bc53d694c32.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/85af7d651b5d48ebb2753bc53d694c32.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883801/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--159aa2da-9ff2-5068-8c29-d5038c1f0799",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/12b4a453931143629c867b8acf6ecb1f.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/12b4a453931143629c867b8acf6ecb1f.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883802/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74e650da-3fa3-5b19-b9b0-af3550734412",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/7e02c8bb4178455e8d3af50503fd27c8.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/7e02c8bb4178455e8d3af50503fd27c8.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883803/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10c7b6b0-63b4-5ca7-a290-a69acbc8194c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/888412a0a67842f2a0ec6bcf581ab656.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/888412a0a67842f2a0ec6bcf581ab656.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883798/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b2ed2c6-5a8c-5555-8bea-4bcbbbd05b74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/d63419ec10664d4384a260b3f7e614cc.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/d63419ec10664d4384a260b3f7e614cc.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883799/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a268dbd8-28f6-5f06-b5cd-b83b9f122a1d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/2ad3b5bf932d444a8ed96d6a1211ae68.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/2ad3b5bf932d444a8ed96d6a1211ae68.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:27:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883800/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e60f00db-b1da-5a7b-afe7-ba2d184e6724",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.179.249.198:60598/i",
      "pattern": "[url:value = 'http://119.179.249.198:60598/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:26:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883797/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fc93b21-b66c-5431-b97c-39ac05824d4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://fesold.com/db9c0fee.exe",
      "pattern": "[url:value = 'https://fesold.com/db9c0fee.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883796/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f91ac5ad-1281-572b-9d5a-e4adcdf5d103",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/6b3b40e54b9c4c26a13d7a72a2eaab3c.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/6b3b40e54b9c4c26a13d7a72a2eaab3c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883793/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf958d16-90f1-5edd-ab92-2a9082ab0825",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mekasa.pro/3479ba86.exe",
      "pattern": "[url:value = 'https://mekasa.pro/3479ba86.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883794/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f73eed23-a510-5f34-b7a8-6239688c295c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mevrio.com/e6d4638c.exe",
      "pattern": "[url:value = 'https://mevrio.com/e6d4638c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883795/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c21eb7a1-d189-59b0-91a6-e73cf6181388",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/fe74b5ae594c4eda870ac2ec9dc214a0.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/fe74b5ae594c4eda870ac2ec9dc214a0.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883791/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0ae4c36-3a1a-5e5e-9946-ec7a32ce6dfb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mekasa.pro/b5d036ea.exe",
      "pattern": "[url:value = 'https://mekasa.pro/b5d036ea.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883792/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad55e81d-a3f3-522e-bdf5-f877937b64c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/32daa1c9eac744b98d12ae18e00f9ad2.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/32daa1c9eac744b98d12ae18e00f9ad2.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883781/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20c318b9-8e56-52c7-9f33-0baf711a3956",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/a14d88353c6441d89205a760ac7a1c79.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/a14d88353c6441d89205a760ac7a1c79.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883782/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--509dcce9-1b76-5a59-a882-76c66455841f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/d71f44238cb84457afebf421116f1c92.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/d71f44238cb84457afebf421116f1c92.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883783/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdf7df34-4532-529b-b00d-4836b7b4028b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/734f12aafddc4617a3bcae5e56ccbe58.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/734f12aafddc4617a3bcae5e56ccbe58.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883784/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed12dc5a-8d00-5cc6-b533-44fa58716177",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/6d4b5504e589459f8e11ad3d1838f3f5.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/6d4b5504e589459f8e11ad3d1838f3f5.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883785/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a929160-7c70-5477-9cc8-461d44afc618",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pokese.pro/24e4e201.exe",
      "pattern": "[url:value = 'https://pokese.pro/24e4e201.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883786/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4db9533f-5c9d-5295-bc51-bf1fc2a48dfb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mekasa.pro/e3970037.exe",
      "pattern": "[url:value = 'https://mekasa.pro/e3970037.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883787/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92f79e87-774c-50c2-a0a4-6ac5051aa000",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mekasa.pro/72c4197f.exe",
      "pattern": "[url:value = 'https://mekasa.pro/72c4197f.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883788/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90d224d8-932c-5013-b6bf-20abbc55716b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mekasa.pro/a240a55d.exe",
      "pattern": "[url:value = 'https://mekasa.pro/a240a55d.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883789/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7a90bb1-3bf8-5a68-97d1-ac2f42fafeef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://mekasa.pro/5d412033.exe",
      "pattern": "[url:value = 'https://mekasa.pro/5d412033.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883790/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8889a5e7-f8f0-57cf-a84c-ec975281029b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/edfaeaf2bb634e3bb0f45339142bec7f.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/edfaeaf2bb634e3bb0f45339142bec7f.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883779/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--601a777b-74b8-5c4f-8b8c-c2d8c539a1f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/99d213b876a747b6a9ff5322cec7f506.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/99d213b876a747b6a9ff5322cec7f506.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883780/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adff1c76-fa76-5907-b523-49b4563760c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/25c935b940ea40cfba6db6c752400178.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/25c935b940ea40cfba6db6c752400178.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883777/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--993f8b89-a1ff-5680-8c79-02eccbe0c57d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/d9e1709923ce40c49d6add23c7c95d0e.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/d9e1709923ce40c49d6add23c7c95d0e.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883778/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27527ad0-6b53-5c76-87e0-e0a70f69eb77",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/f9a78169df37447aa3dfc6ad4d3593e7.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/f9a78169df37447aa3dfc6ad4d3593e7.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883776/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff6e8977-5d77-5a54-a55f-b3d54dc00a38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/57c96d44ac93466f8cf814703a77fe4c.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/57c96d44ac93466f8cf814703a77fe4c.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883774/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bb0954f-1f9a-5962-bae8-49aa180a6700",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://62.60.226.198/uploads/7d3839dfd03646a282c79d407acc92e8.exe",
      "pattern": "[url:value = 'http://62.60.226.198/uploads/7d3839dfd03646a282c79d407acc92e8.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883775/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--803d9ae5-5383-5f5a-96ab-e26c8ca55124",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://39.64.9.139:43526/i",
      "pattern": "[url:value = 'http://39.64.9.139:43526/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:20:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883773/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9887ed86-296b-577d-8161-8c1d39968996",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://81.60.210.194:52127/bin.sh",
      "pattern": "[url:value = 'http://81.60.210.194:52127/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:16:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883772/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7d5ad26-1dbc-52b6-83df-50680a8e8772",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wclaheuy.akhbarirani.com/f8429bd0-6a0d-477e-92b5-fc1f7d2b6bc3",
      "pattern": "[url:value = 'https://wclaheuy.akhbarirani.com/f8429bd0-6a0d-477e-92b5-fc1f7d2b6bc3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:14:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883771/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--845bb5e5-2835-5c5d-8b2d-6943056ef063",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.27.207:33177/i",
      "pattern": "[url:value = 'http://110.36.27.207:33177/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:08:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883770/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--782d6979-40c3-5188-9cb3-a3cdf87763de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://90.153.217.151:59587/i",
      "pattern": "[url:value = 'http://90.153.217.151:59587/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:06:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883769/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f61825c6-0573-5fed-869d-816d99cc62a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.52.22.6:35725/i",
      "pattern": "[url:value = 'http://115.52.22.6:35725/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883768/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7055f303-3f03-5b81-968b-f324df4add04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://qcfonhxm.1pishbini.com/32e1dbab-274d-4d8c-89d3-34b3a63d0990",
      "pattern": "[url:value = 'https://qcfonhxm.1pishbini.com/32e1dbab-274d-4d8c-89d3-34b3a63d0990']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883767/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f851c87b-4fbb-5cfd-9ecf-523321e2a2c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://7eo6l6dj.bet90forward.win/?ublib=3fa0c2f5-d3c9-496b-adeb-41529ccc0bdc",
      "pattern": "[url:value = 'https://7eo6l6dj.bet90forward.win/?ublib=3fa0c2f5-d3c9-496b-adeb-41529ccc0bdc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:01:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883766/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a362081-46e0-52d7-ad10-586406d1ce59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://119.179.249.198:60598/bin.sh",
      "pattern": "[url:value = 'http://119.179.249.198:60598/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T05:00:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883765/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f1ca9fe-8350-58bf-b58c-d71e7fafe84c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.234.28:52773/i",
      "pattern": "[url:value = 'http://115.55.234.28:52773/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883764/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9189b33b-4c32-5fc5-b56d-75a4c9731138",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://jvjj.calvaryhospice.org/1a67207a-4403-451b-9383-adf105fa8c31",
      "pattern": "[url:value = 'https://jvjj.calvaryhospice.org/1a67207a-4403-451b-9383-adf105fa8c31']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:50:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883763/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ffdb900-fba0-5293-b4cf-f040359efd60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://151.192.135.88:41726/i",
      "pattern": "[url:value = 'http://151.192.135.88:41726/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883762/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b72f0df-6845-558b-864f-43d59874e7ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.36.27.207:33177/bin.sh",
      "pattern": "[url:value = 'http://110.36.27.207:33177/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:49:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883761/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--838f1531-031d-5f3f-9c26-3b87e9c9591e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.91.145:44637/i",
      "pattern": "[url:value = 'http://105.184.91.145:44637/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:42:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883760/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bee47c7-3363-5e01-9f50-9b7812c78b55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://e1l3tn5m.bet1xyek.bet/?ublib=b09a5cff-37d4-43f3-9d39-3e1075dad749",
      "pattern": "[url:value = 'https://e1l3tn5m.bet1xyek.bet/?ublib=b09a5cff-37d4-43f3-9d39-3e1075dad749']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:36:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883759/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fa43927-bf28-5cd6-83e5-d9998829f3ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://dcyfiemg.betzopoda.com/?ublib=4dc7cc3d-60da-4224-b2f4-90aae6ebc7e2",
      "pattern": "[url:value = 'https://dcyfiemg.betzopoda.com/?ublib=4dc7cc3d-60da-4224-b2f4-90aae6ebc7e2']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:32:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883758/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78380b8e-c3d6-57d3-aa67-844b5e4dc534",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://151.192.135.88:41726/bin.sh",
      "pattern": "[url:value = 'http://151.192.135.88:41726/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:31:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883757/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c6c1f1-796a-54a3-a66e-348d4ef371c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.238.64.12:58417/i",
      "pattern": "[url:value = 'http://42.238.64.12:58417/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883756/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2110af90-3b5f-590c-99c9-8a43f301a4a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.234.28:52773/bin.sh",
      "pattern": "[url:value = 'http://115.55.234.28:52773/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883755/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c280fac-9cea-5209-908c-b4ebacaeecff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://indf.betawarz.com/1db7be2b-1c69-4302-b7df-8269658755b7",
      "pattern": "[url:value = 'https://indf.betawarz.com/1db7be2b-1c69-4302-b7df-8269658755b7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:26:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883754/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1bf3805-1b67-5daa-ba9b-7c8cfd90e334",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.103.116.68:46941/bin.sh",
      "pattern": "[url:value = 'http://59.103.116.68:46941/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883752/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b7abf5f-14b4-5a15-94ca-b2ba514e4ee3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.103.116.68:46941/i",
      "pattern": "[url:value = 'http://59.103.116.68:46941/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883753/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6341604e-b7fd-5dd4-847d-59c5c56b22ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.177.78.235:35262/i",
      "pattern": "[url:value = 'http://42.177.78.235:35262/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:19:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883751/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--800ed7e2-4860-5143-8f7c-a69b53fd075c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.14.97.76:44096/bin.sh",
      "pattern": "[url:value = 'http://123.14.97.76:44096/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:18:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883750/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d9d1d08-b578-5566-aae4-845ce4984e25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.91.145:44637/bin.sh",
      "pattern": "[url:value = 'http://105.184.91.145:44637/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883749/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b34fb12-e712-53e9-94a7-ca03affb7bb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.235.194.222:60042/bin.sh",
      "pattern": "[url:value = 'http://123.235.194.222:60042/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:16:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883748/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2abf9156-510f-538b-acda-66f2bfe5d246",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.126.121.9:52719/bin.sh",
      "pattern": "[url:value = 'http://182.126.121.9:52719/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T04:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883747/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df5782fb-4e7a-58d5-95a3-f9f255257ffe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.137.129.191:59754/i",
      "pattern": "[url:value = 'http://61.137.129.191:59754/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:59:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883746/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1028d2a-6b64-5256-a9fb-a9abccbf50a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://smildilt.1xjet.pro/1503cab1-110d-4354-90eb-0ae1ab838c91",
      "pattern": "[url:value = 'https://smildilt.1xjet.pro/1503cab1-110d-4354-90eb-0ae1ab838c91']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:51:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883745/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59054b21-79f5-5f8b-aa12-dcff092478bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.84.214.35:43836/bin.sh",
      "pattern": "[url:value = 'http://120.84.214.35:43836/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:47:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883744/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16d404bc-e8dc-5584-a928-21d42f1d06d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.118.66:51233/i",
      "pattern": "[url:value = 'http://110.37.118.66:51233/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883742/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c18540b-b879-53bf-b407-b788442b4c72",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.118.66:51233/bin.sh",
      "pattern": "[url:value = 'http://110.37.118.66:51233/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883743/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f145d34c-bdf9-5f3b-b6be-884d2688915f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://cpvt.bet120.games/f21bac70-6953-4cdf-9be0-7b54ca5c0e3b",
      "pattern": "[url:value = 'https://cpvt.bet120.games/f21bac70-6953-4cdf-9be0-7b54ca5c0e3b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:33:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883741/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc85a9e6-ea88-5fb9-ad11-2abad72fd096",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.55.10.88:38789/bin.sh",
      "pattern": "[url:value = 'http://115.55.10.88:38789/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883740/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa55392a-af44-58bf-b593-b8e93b896127",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://78.187.104.169:44308/i",
      "pattern": "[url:value = 'http://78.187.104.169:44308/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T03:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883739/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5b81cb0-a6e2-5139-8389-dfb9311853c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://42.229.160.104:58096/bin.sh",
      "pattern": "[url:value = 'http://42.229.160.104:58096/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:45:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883738/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d88363f9-476e-5703-beb7-d13276216eff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.139.122.118:42542/i",
      "pattern": "[url:value = 'http://222.139.122.118:42542/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:42:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883737/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15f16d93-7ae3-5762-a14e-d78e934400e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.54.43.201:39395/i",
      "pattern": "[url:value = 'http://61.54.43.201:39395/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:39:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883736/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9e8caf9-40a4-5738-b447-82a2cd47403e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ydanflbg.1xgermany.com/c1e82c66-9d7c-4087-a5a1-76952278a143",
      "pattern": "[url:value = 'https://ydanflbg.1xgermany.com/c1e82c66-9d7c-4087-a5a1-76952278a143']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:36:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883735/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8704465-2002-56a0-9b65-cc9acf16ed90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pzhj.barcelona11.com/45082e60-eb77-4ad0-a4ab-c73f8ddb76bb",
      "pattern": "[url:value = 'https://pzhj.barcelona11.com/45082e60-eb77-4ad0-a4ab-c73f8ddb76bb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:35:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883734/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4131b24b-928e-554b-acb6-bfcd1157a0cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://eoy6mamg.bettrend.vip/?ublib=d8976c1a-b79c-4501-8555-d65e6c07d519",
      "pattern": "[url:value = 'https://eoy6mamg.bettrend.vip/?ublib=d8976c1a-b79c-4501-8555-d65e6c07d519']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:32:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883733/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--248daf28-08a2-5c62-b5cb-b594a373dddf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.8.55.58:53035/bin.sh",
      "pattern": "[url:value = 'http://123.8.55.58:53035/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883732/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec8ac213-f222-51ef-9db7-2f083fa61db0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.137.129.191:59754/bin.sh",
      "pattern": "[url:value = 'http://61.137.129.191:59754/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:25:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883731/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8f604d2-385f-5fa3-9a68-1ac6a7a2f923",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.76.93:57607/i",
      "pattern": "[url:value = 'http://105.184.76.93:57607/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:15:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883730/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6f9a243-f4cd-5974-aefc-34eac803bc9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://61.54.43.201:39395/bin.sh",
      "pattern": "[url:value = 'http://61.54.43.201:39395/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T02:15:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883729/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12e89668-88e2-5c0e-80cc-cbfedf7ebe1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.37.100.207:54087/i",
      "pattern": "[url:value = 'http://27.37.100.207:54087/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:55:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883728/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79c8c7d5-9899-5931-8acd-31c3ee40d4af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.95.232:58447/i",
      "pattern": "[url:value = 'http://222.137.95.232:58447/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883727/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abac866b-8b54-54c7-87ea-88c4303b944f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://105.184.76.93:57607/bin.sh",
      "pattern": "[url:value = 'http://105.184.76.93:57607/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:50:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883726/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b840b967-4ea5-5312-a381-d149c2e0af08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://hljajzy.arsenal11.com/731393f8-c825-45a1-a0a1-1d851f441ceb",
      "pattern": "[url:value = 'https://hljajzy.arsenal11.com/731393f8-c825-45a1-a0a1-1d851f441ceb']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:40:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883725/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04e14476-61ee-5a00-b4a4-16409be30db3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://wakvssup.1xgame.pro/593bc40b-788b-4929-a6a0-e5dfdee06a98",
      "pattern": "[url:value = 'https://wakvssup.1xgame.pro/593bc40b-788b-4929-a6a0-e5dfdee06a98']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883724/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35538f92-39c5-5ffd-9762-0bec06872a11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-blkcg",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-blkcg']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:23:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883723/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--037d103b-9ecd-5c41-9025-2464a30ef67b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:22:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883721/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e2cf9fe-1e08-5fc4-8b50-bf6132db6eb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-irq-bal",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-irq-bal']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:22:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883722/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf3d2720-786a-57ff-9681-9fdebb78a4f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-crypto",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-crypto']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:21:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883720/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61e9cad0-89be-54dc-bc5a-20c1db1fba0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-softirq",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-softirq']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:21:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883718/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d82a9c5b-2361-5e56-979f-698ad6675dcb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-events",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-events']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:21:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883719/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3bb1f17-c264-5695-b90e-e6f971ec9fc0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-writeback",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-writeback']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883713/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e036634b-4e36-5a8a-8201-623439686723",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-irq",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-irq']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883714/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84b152ef-632d-5a02-a32a-8b75cfa7621d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-netns-rt",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-netns-rt']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883715/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38f75fde-b8e7-5dab-987c-f1374e6aeb85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-netns",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-netns']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883716/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49ff1ca0-0ee7-50e7-a0df-8013c50adbd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/kworkerd-rcu",
      "pattern": "[url:value = 'http://91.92.40.118/kworkerd-rcu']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883717/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d2c6036-8575-5922-95fb-610ceb4dc45f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.95.232:58447/bin.sh",
      "pattern": "[url:value = 'http://222.137.95.232:58447/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:16:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883712/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87084765-a0d7-5df7-bb7f-f04653e012f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://vhkpyhz.alhilal90.com/4cc86bb8-a612-45dd-bbc2-a1ac74ea915d",
      "pattern": "[url:value = 'https://vhkpyhz.alhilal90.com/4cc86bb8-a612-45dd-bbc2-a1ac74ea915d']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T01:03:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883711/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15f58220-cfe1-55e5-923d-c39a1489bcfa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.96.136.162:35864/i",
      "pattern": "[url:value = 'http://59.96.136.162:35864/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883710/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c04f6ff-cb36-567c-8c4c-560a5e722ba9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://207.34.149.169:32877/i",
      "pattern": "[url:value = 'http://207.34.149.169:32877/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:38:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883709/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a95478e5-a1c9-5057-9ca9-400edf23d040",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://178.176.107.122:33136/bin.sh",
      "pattern": "[url:value = 'http://178.176.107.122:33136/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:36:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883708/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bc466d6-ea45-5dbc-9731-07e14ab04b75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ascaf0yi.rollexbet.com/?ublib=114f0fac-eaa9-466e-8ce8-e479c58e0653",
      "pattern": "[url:value = 'https://ascaf0yi.rollexbet.com/?ublib=114f0fac-eaa9-466e-8ce8-e479c58e0653']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:24:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883707/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f237fe94-fd0f-5232-bb6d-85980edb2b3f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.175.192.197/bot.sh",
      "pattern": "[url:value = 'http://5.175.192.197/bot.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:20:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883704/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--642a8c26-51a4-5540-8592-4de6d73fb87e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.175.192.197/bot",
      "pattern": "[url:value = 'http://5.175.192.197/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:20:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883705/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4446bf2-bc79-5c1d-b89b-ae1a544a374c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://5.175.192.197/bot_x86_64",
      "pattern": "[url:value = 'http://5.175.192.197/bot_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:20:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883706/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dab39600-9f5f-5de8-97eb-09ac94ff8695",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://130.12.181.111/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://130.12.181.111/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:18:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883703/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2b54eb4-b9dd-52e4-9db5-481a8ce1f6a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.137.96.242:55578/i",
      "pattern": "[url:value = 'http://222.137.96.242:55578/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:13:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883702/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51048789-b46c-55b0-ba87-e1c54f0e90e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pzaiotb.akhbarirani.com/9d80dbd7-e049-4a07-b02f-787dd27a017f",
      "pattern": "[url:value = 'https://pzaiotb.akhbarirani.com/9d80dbd7-e049-4a07-b02f-787dd27a017f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:08:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883701/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db065654-ac5b-521f-89f8-19798ac5174a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.14.156:33710/i",
      "pattern": "[url:value = 'http://110.37.14.156:33710/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-08T00:02:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883700/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2936845c-48c5-5bf7-b8e1-3e3d28f35654",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://clkdnxzu.bet1yekbet.bet/04e628fa-d1f4-4ece-9ca2-fd812d391004",
      "pattern": "[url:value = 'https://clkdnxzu.bet1yekbet.bet/04e628fa-d1f4-4ece-9ca2-fd812d391004']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:46:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883699/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2db37cc-9fb4-573b-a066-d67dc6157ea2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.103.86.89:52040/i",
      "pattern": "[url:value = 'http://59.103.86.89:52040/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:44:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883698/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e064e52-cdce-5985-bcc3-369eeff59473",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://h1b2r6fo.oris303.com/?ublib=959d7f47-e584-4378-b53c-a0b079d00dd4",
      "pattern": "[url:value = 'https://h1b2r6fo.oris303.com/?ublib=959d7f47-e584-4378-b53c-a0b079d00dd4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883697/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62cb5386-32eb-5657-b970-4d2957034a53",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.14.156:33710/bin.sh",
      "pattern": "[url:value = 'http://110.37.14.156:33710/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:36:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883696/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3f25eb2-3c35-5cea-af7a-10d1a3a088fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://75rw2mk7.1xvip.xyz/?ublib=6ff97af0-0973-4fa9-b29e-85af6e525bda",
      "pattern": "[url:value = 'https://75rw2mk7.1xvip.xyz/?ublib=6ff97af0-0973-4fa9-b29e-85af6e525bda']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:36:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883695/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43b01743-b54d-5eef-bda6-e6fb3de449db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://sgnfvyd.1pishbini.com/120f474e-cde2-4c2c-8da9-ad8480eec06b",
      "pattern": "[url:value = 'https://sgnfvyd.1pishbini.com/120f474e-cde2-4c2c-8da9-ad8480eec06b']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:15:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883694/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8455d787-95dc-55b6-99ab-01a8bfd005c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.56.64.251:58971/i",
      "pattern": "[url:value = 'http://115.56.64.251:58971/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:10:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883693/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b76acef-8268-5fdd-a7f7-d6501a56725e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.97.251.109:44801/i",
      "pattern": "[url:value = 'http://59.97.251.109:44801/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:09:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883692/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4d6484f-2731-5f5f-bbf1-f02347b84f65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/arm5",
      "pattern": "[url:value = 'http://45.80.230.17/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883683/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62ac67f6-1ccf-50b6-b48d-f819c8cc541b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/arm/",
      "pattern": "[url:value = 'http://45.80.230.17/arm/']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883684/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--790d20e7-8da4-596a-b81f-2dd4d5459f9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/arm",
      "pattern": "[url:value = 'http://45.80.230.17/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883685/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d7f950c-d370-5a13-ac86-fd3856241ea8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/ppc",
      "pattern": "[url:value = 'http://45.80.230.17/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883686/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb2fff3d-50a6-505b-8949-da0a16ca3bb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/mpsl",
      "pattern": "[url:value = 'http://45.80.230.17/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883687/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89cdaa13-df64-5d1b-8eb9-97ad179ff8d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/arm7",
      "pattern": "[url:value = 'http://45.80.230.17/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883688/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af6cdfc9-d4c1-5a69-ac7b-161eea3e39de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/spc",
      "pattern": "[url:value = 'http://45.80.230.17/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883689/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc04fc30-2a52-5eda-a480-c8bb51627636",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/sh4",
      "pattern": "[url:value = 'http://45.80.230.17/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883690/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea31bcd0-9551-57b4-9f14-0252633c0d28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://45.80.230.17/x86_64",
      "pattern": "[url:value = 'http://45.80.230.17/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883691/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3918caf1-9e3a-517f-82ea-747b820ef469",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://27.222.178.246:42909/bin.sh",
      "pattern": "[url:value = 'http://27.222.178.246:42909/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T23:06:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883682/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09db1619-51c3-50a1-bf3e-61bbc3d1d84f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://exwrvqwl.bet1yek1.bet/c1fc358a-f0c6-4956-865c-00d763c883b1",
      "pattern": "[url:value = 'https://exwrvqwl.bet1yek1.bet/c1fc358a-f0c6-4956-865c-00d763c883b1']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:43:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883681/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--217c9d3b-4c60-54f4-a210-3d72397d4c58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://59.97.251.109:44801/bin.sh",
      "pattern": "[url:value = 'http://59.97.251.109:44801/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:42:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883680/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--671436ff-5501-5af1-b041-c08848160263",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.78.170.42:46944/i",
      "pattern": "[url:value = 'http://37.78.170.42:46944/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883676/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb60e414-eb69-5be9-932a-4377ba48e841",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.78.170.42:46944/Mozi.m",
      "pattern": "[url:value = 'http://37.78.170.42:46944/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883677/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eebe616e-5190-5412-a3ec-ee3ffa9ce5ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.78.170.42:46944/Mozi.a",
      "pattern": "[url:value = 'http://37.78.170.42:46944/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883678/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--814c2298-0858-5479-8044-fff14cd65cc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://37.78.170.42:46944/bin.sh",
      "pattern": "[url:value = 'http://37.78.170.42:46944/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883679/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcb79157-7a63-5baf-bf2a-77179aaf28b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://pd9l19qk.milliardbet.com/?ublib=7978d189-3b6b-49f4-b52d-cefe50fd20f3",
      "pattern": "[url:value = 'https://pd9l19qk.milliardbet.com/?ublib=7978d189-3b6b-49f4-b52d-cefe50fd20f3']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883675/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9a8e4db-0768-5031-9f97-50ef995b4982",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.141.177:46554/i",
      "pattern": "[url:value = 'http://222.141.141.177:46554/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:20:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883674/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e42ba8b-0e97-5d53-a4e1-8b43add25a1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.112.76:42224/i",
      "pattern": "[url:value = 'http://182.127.112.76:42224/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T22:19:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883673/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--caf18897-7ac7-580f-8b9d-e4ce06fdacbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://222.141.141.177:46554/bin.sh",
      "pattern": "[url:value = 'http://222.141.141.177:46554/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:54:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883672/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0fbc0f4-a780-5a0d-9554-b364e6325860",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://182.127.112.76:42224/bin.sh",
      "pattern": "[url:value = 'http://182.127.112.76:42224/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:48:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883671/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecebffbe-d5d2-5c46-b6d7-6a8240527bfd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ookksol.zeebline.com/8aca6874-0746-4f80-9b51-63ca7d6af894",
      "pattern": "[url:value = 'https://ookksol.zeebline.com/8aca6874-0746-4f80-9b51-63ca7d6af894']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:43:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883670/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63c27ea7-898b-50bf-9a77-690710f6b211",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://yeduwgyh.backlinkyek.com/0105e3bd-d897-489f-883f-56cbc66ba39f",
      "pattern": "[url:value = 'https://yeduwgyh.backlinkyek.com/0105e3bd-d897-489f-883f-56cbc66ba39f']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883669/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b6bc06f-5928-5dec-849f-f217757431f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.83.236.10:58951/i",
      "pattern": "[url:value = 'http://171.83.236.10:58951/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:31:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883668/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c4d1516-4b66-55cb-a4b6-c69b14a77e3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.94.218:38525/i",
      "pattern": "[url:value = 'http://163.142.94.218:38525/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:17:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883667/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31805830-812d-5733-9742-2123f81fb04a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://110.37.39.32:39109/i",
      "pattern": "[url:value = 'http://110.37.39.32:39109/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883666/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--962266bc-e84e-5f4e-9bcd-252766c79195",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.95.121:59995/i",
      "pattern": "[url:value = 'http://115.50.95.121:59995/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:12:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883665/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd96e26f-04b1-55b2-91a2-203fefc23ef1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://171.83.236.10:58951/bin.sh",
      "pattern": "[url:value = 'http://171.83.236.10:58951/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T21:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883664/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4190b67f-b82c-5c50-989b-75318fcf94b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://91.92.40.118/wget.sh",
      "pattern": "[url:value = 'http://91.92.40.118/wget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:55:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883663/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f4ce60d-4fc9-505c-b00d-42434281e7d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://163.142.94.218:38525/bin.sh",
      "pattern": "[url:value = 'http://163.142.94.218:38525/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:41:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883662/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd4f2fb8-ddd2-5f4c-86d4-fa07c958fd51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://115.50.89.177:48625/i",
      "pattern": "[url:value = 'http://115.50.89.177:48625/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883661/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71c84039-2df0-5df0-b275-2a70f0613745",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://ajdixpjp.1xforward.xyz/f4fe76ec-d460-4855-921c-21d57935696a",
      "pattern": "[url:value = 'https://ajdixpjp.1xforward.xyz/f4fe76ec-d460-4855-921c-21d57935696a']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:32:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883660/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6965091-8a4a-5478-8090-b5103421f3d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://120.43.54.158:51830/i",
      "pattern": "[url:value = 'http://120.43.54.158:51830/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:30:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883659/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25358796-2b5c-5535-ad5a-017d53d67804",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://36.77.231.47:44683/i",
      "pattern": "[url:value = 'http://36.77.231.47:44683/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883658/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f37dc78b-5417-55b5-a61f-1fac8f8f179b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: http://123.4.190.17:48149/i",
      "pattern": "[url:value = 'http://123.4.190.17:48149/i']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883657/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e882ec28-4f10-5119-b9a6-66431d44eb3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-07-14T20:11:33.712Z",
      "modified": "2026-07-14T20:11:33.712Z",
      "name": "url: https://npvnwrv.jetbet90iran.bet/3f59e222-db58-4089-9421-28b4d10984d8",
      "pattern": "[url:value = 'https://npvnwrv.jetbet90iran.bet/3f59e222-db58-4089-9421-28b4d10984d8']",
      "pattern_type": "stix",
      "valid_from": "2026-07-07T20:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3883656/"
        }
      ]
    }
  ]
}
