{
  "type": "bundle",
  "id": "bundle--72f2d97e-cbf4-527c-acc3-3734a9047799",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "Applied Cybernetics Group",
      "identity_class": "organization"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8f82b95-ae0b-5b5e-abcc-a9900969c851",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://3yl7mt55.andisheeslami2.xyz/?ublib=6a25707c-7070-4d6a-8fa6-454cf440bbb3",
      "pattern": "[url:value = 'https://3yl7mt55.andisheeslami2.xyz/?ublib=6a25707c-7070-4d6a-8fa6-454cf440bbb3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:23:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862302/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a383271e-3b0c-5048-bf99-69cd427bdda5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.203.55.110:51605/i",
      "pattern": "[url:value = 'http://27.203.55.110:51605/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862301/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c81e9f2c-7371-53a7-a6f0-f4585bab2038",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.77.19:46052/i",
      "pattern": "[url:value = 'http://110.36.77.19:46052/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:20:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862300/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0671ebcd-6a51-5737-8d28-5d4721ecedbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.26.86:51819/i",
      "pattern": "[url:value = 'http://110.36.26.86:51819/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:19:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862299/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d4e4627-7619-50e7-9400-7b271345ffce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.226.215.4:45552/bin.sh",
      "pattern": "[url:value = 'http://42.226.215.4:45552/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:18:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862298/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cabd4717-9f27-5430-9cbe-93d378890f02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.81.217.45:36789/bin.sh",
      "pattern": "[url:value = 'http://39.81.217.45:36789/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862297/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4846d2fe-daf8-5979-8946-4cffca508797",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://45.156.87.136/bin/support.client.exe",
      "pattern": "[url:value = 'https://45.156.87.136/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:16:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862295/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--336650b2-73ba-5580-9256-58323abcce2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://corwineagles.com/cares.png",
      "pattern": "[url:value = 'https://corwineagles.com/cares.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:16:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862296/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--669fb95e-6c7b-52f6-9682-3f3137c4debe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.94.31.83/update",
      "pattern": "[url:value = 'http://45.94.31.83/update']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:11:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862294/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef284131-5823-520c-92fe-86859073476a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hdhz.it.com/mcbh/mcbh.dat",
      "pattern": "[url:value = 'https://hdhz.it.com/mcbh/mcbh.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862293/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2331382b-0693-5eb0-9ee2-d0deae2a7fc3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://solar-sanat.net/EagleJetClient4.exe",
      "pattern": "[url:value = 'https://solar-sanat.net/EagleJetClient4.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862292/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce8d17fc-79b7-58fc-868d-482dd8b2d61c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.225.1.54:38212/bin.sh",
      "pattern": "[url:value = 'http://115.225.1.54:38212/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:09:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862291/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a659c78-9c12-5792-b754-1ce032366921",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://comserlivuior.store/c/bin.dat",
      "pattern": "[url:value = 'https://comserlivuior.store/c/bin.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:07:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862290/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed8b72d8-17b2-5bd3-a574-4d9da571c1c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://comserlivuior.store/a/bin.dat",
      "pattern": "[url:value = 'https://comserlivuior.store/a/bin.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862289/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f86f375c-cba5-5168-9b30-25f8b5287b2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://comserlivuior.store/d/bin.dat",
      "pattern": "[url:value = 'https://comserlivuior.store/d/bin.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:05:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862288/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--381ce4d8-eeb8-5fc4-ae5b-c908ce9a122b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://comserlivuior.store/b/bin.dat",
      "pattern": "[url:value = 'https://comserlivuior.store/b/bin.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862287/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ecdcd01-7174-5b7f-b4f1-621a65f56687",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xtktlprb.rial.bet/a4c37e8b-56df-4af3-b72e-ed3d06ed1eb5",
      "pattern": "[url:value = 'https://xtktlprb.rial.bet/a4c37e8b-56df-4af3-b72e-ed3d06ed1eb5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862286/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc9f46b7-fbba-5e86-a4d1-0c6a48a4f012",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://usjcx.site/grc/bin.dat",
      "pattern": "[url:value = 'https://usjcx.site/grc/bin.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:02:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862285/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--778c11f8-8790-5569-9bd0-7e9837c2c23d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://tradedsglobal.com/yuyu/rumpyu.png",
      "pattern": "[url:value = 'http://tradedsglobal.com/yuyu/rumpyu.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:02:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862283/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a666540-386c-51f5-9c4d-cc0d8a118d7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://tradedsglobal.com/optimized_MSIlatino.png",
      "pattern": "[url:value = 'http://tradedsglobal.com/optimized_MSIlatino.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T09:02:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862284/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f714e6c-aa8f-5a0a-86de-6b13739b1eb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://salsabil.com/steg/stego_pussycat.png",
      "pattern": "[url:value = 'https://salsabil.com/steg/stego_pussycat.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:57:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862282/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eeaa81de-3e5c-56c3-80de-a8c74ebfac90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sandyadamspodcast.com/Xyz1.exe",
      "pattern": "[url:value = 'https://sandyadamspodcast.com/Xyz1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862281/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10c94ca0-633e-593e-9717-6bc1cfb8ecc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://1yusfrvk.pishbinibet.bet/?ublib=5d59516b-dece-4d3f-b936-36271d5ef5d9",
      "pattern": "[url:value = 'https://1yusfrvk.pishbinibet.bet/?ublib=5d59516b-dece-4d3f-b936-36271d5ef5d9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:56:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862280/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6902e535-885d-57e0-96cd-9b9e395c30a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pingdisp.com/level/stub.ps1",
      "pattern": "[url:value = 'https://pingdisp.com/level/stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:55:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862279/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--712df4d4-60de-58ed-97a3-02c313063680",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ithfkpx.amoozeshtagipour.shop/f7517b32-8001-43d1-8bdc-97e1ab0b288b",
      "pattern": "[url:value = 'https://ithfkpx.amoozeshtagipour.shop/f7517b32-8001-43d1-8bdc-97e1ab0b288b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:55:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862278/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0ac7983-a0c7-5d79-be46-303605f91c88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.77.19:46052/bin.sh",
      "pattern": "[url:value = 'http://110.36.77.19:46052/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:53:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862277/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fa5c30b-e3f9-59b2-9eb9-253b8331b61c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.93.182:53019/bin.sh",
      "pattern": "[url:value = 'http://110.36.93.182:53019/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862276/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89dd3557-2062-52d5-9a16-bbb96bb3f12f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.203.55.110:51605/bin.sh",
      "pattern": "[url:value = 'http://27.203.55.110:51605/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:51:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862275/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--106e55b2-3f7a-5b30-a29a-f4936e46bc24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/wealthy4500/pc/raw/refs/heads/main/ZoomInstaller.msi",
      "pattern": "[url:value = 'https://github.com/wealthy4500/pc/raw/refs/heads/main/ZoomInstaller.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:50:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7d8ff59-9a83-5b4a-93fc-a09aa6948d11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://raw.githubusercontent.com/wealthy4500/desk/refs/heads/main/okkeFhr.txt",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wealthy4500/desk/refs/heads/main/okkeFhr.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:50:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f84e58e-f029-5d56-80b0-a12e06d190ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://raw.githubusercontent.com/wealthy4500/desk/refs/heads/main/mcdFmFf.txt",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wealthy4500/desk/refs/heads/main/mcdFmFf.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:50:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48a8fb17-78f3-5559-a679-970619094961",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/ysxPQ",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/ysxPQ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:49:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5c034c9-1e46-5cc9-bf21-59e59a0a77e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-ce02802067934e0eb072f69bf6427bf6.r2.dev/labito.png",
      "pattern": "[url:value = 'https://pub-ce02802067934e0eb072f69bf6427bf6.r2.dev/labito.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5c75776-da9b-59a5-b1e2-41aadbf36ebe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.93.139.180:48356/i",
      "pattern": "[url:value = 'http://112.93.139.180:48356/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:46:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d0a6847-c694-5ac1-b8dc-91116d2e9843",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.156.152.234/bot_arm7",
      "pattern": "[url:value = 'http://94.156.152.234/bot_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39bac78a-8e30-5e40-9840-1cda13b7456e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/CC2",
      "pattern": "[url:value = 'http://188.132.232.81/CC2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b679673c-4bec-56f1-899d-7da2bdaa7a81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.156.152.234/bot_64",
      "pattern": "[url:value = 'http://94.156.152.234/bot_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d13e150-6038-5b72-82d4-b47396b975b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.156.152.234/bot_arm32",
      "pattern": "[url:value = 'http://94.156.152.234/bot_arm32']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebe14b32-9a13-5f81-a8b0-3959ff52adc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/x0z",
      "pattern": "[url:value = 'http://188.132.232.81/x0z']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43fe9183-2b55-5755-9636-74dd24ce2c48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.156.152.234/mipsel",
      "pattern": "[url:value = 'http://94.156.152.234/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7f5187b-8749-5eb3-9dd7-fa03b3534e55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/64b82e",
      "pattern": "[url:value = 'http://45.205.1.59/64b82e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b72dc819-8c18-53c5-be43-d4cb5c83c680",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/qPf",
      "pattern": "[url:value = 'http://188.132.232.81/qPf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90a01de1-d3ef-5ff3-a2fd-c77abdd75e3f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Wz7t",
      "pattern": "[url:value = 'http://188.132.232.81/Wz7t']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15db2193-7e2e-5ba5-8956-b82602990896",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/QSob",
      "pattern": "[url:value = 'http://188.132.232.81/QSob']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--608ba038-3f98-5a08-b40d-cd58d431f77e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/jRre",
      "pattern": "[url:value = 'http://188.132.232.81/jRre']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fbd3804-632a-593e-8af8-9755c69313d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/QVz1",
      "pattern": "[url:value = 'http://188.132.232.81/QVz1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e377fbf-d4e1-54fd-953b-5e8adec5ce26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/IdA",
      "pattern": "[url:value = 'http://188.132.232.81/IdA']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c85b3e1-efeb-52d9-8b19-28f5ffc5da65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/MfMN",
      "pattern": "[url:value = 'http://188.132.232.81/MfMN']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97c78aeb-72d7-580c-a78d-066f2d730981",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/0BD3",
      "pattern": "[url:value = 'http://188.132.232.81/0BD3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d62ed2e-3e37-55ba-8bb3-00ec5b7b1a59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/MFl",
      "pattern": "[url:value = 'http://188.132.232.81/MFl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27357025-3de5-5de4-a932-2943e89bbb2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/My6",
      "pattern": "[url:value = 'http://188.132.232.81/My6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63fa0eb9-033b-5aed-b264-0d3dcc102887",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/MXl",
      "pattern": "[url:value = 'http://188.132.232.81/MXl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04fa39bd-50dd-52eb-9dd5-a04e7d45c7d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c9d703",
      "pattern": "[url:value = 'http://45.205.1.59/c9d703']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53e20af0-da26-5fb2-91b8-a1f030141d19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0fb7eb",
      "pattern": "[url:value = 'http://45.205.1.59/0fb7eb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--225c41ba-82cf-58fc-83c2-08f4068f782c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/43c3ea",
      "pattern": "[url:value = 'http://45.205.1.59/43c3ea']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b1af228-d585-5fca-9725-248028bc9fac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d65f43",
      "pattern": "[url:value = 'http://45.205.1.59/d65f43']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9e0a88a-a776-51c9-b33f-871464e91255",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ef53ac",
      "pattern": "[url:value = 'http://45.205.1.59/ef53ac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0117752-a77d-5599-a79c-7012980d2f46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cb5811",
      "pattern": "[url:value = 'http://45.205.1.59/cb5811']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1812c427-56e7-5c74-8c89-d80f12dcde08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6cdc8f",
      "pattern": "[url:value = 'http://45.205.1.59/6cdc8f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--563f4386-60da-5617-83b9-c744eb194174",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/87516e",
      "pattern": "[url:value = 'http://45.205.1.59/87516e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2437b087-826e-5707-b84c-7a4e08152911",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/mSPN",
      "pattern": "[url:value = 'http://188.132.232.81/mSPN']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faa76e10-221a-5416-83e2-7c96058c7aea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nickart.ro/optimized_MSI.png",
      "pattern": "[url:value = 'https://nickart.ro/optimized_MSI.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53303813-86e6-5d74-ae3a-68bb8a7cd9f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/1Nk",
      "pattern": "[url:value = 'http://188.132.232.81/1Nk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--578ff98f-d8bd-5d48-b6bd-306a156a56fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/120aaa",
      "pattern": "[url:value = 'http://45.205.1.59/120aaa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac63e14a-67bc-56ea-a49d-64a41a77f24d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c235ec",
      "pattern": "[url:value = 'http://45.205.1.59/c235ec']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f00b7b4-f766-5961-af68-1efd6eb6ae69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/05dcab",
      "pattern": "[url:value = 'http://45.205.1.59/05dcab']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87ff01ea-76af-560e-b515-e160747bca85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1ybVeXgfiBpzEUwaR8f-jxNjlJj9tJubu",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1ybVeXgfiBpzEUwaR8f-jxNjlJj9tJubu']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:44:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73d137c3-10a1-5649-a4e1-402779a7bd8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1J4V6ViVmg6U5AYHp00s0vbAtiQdKtC0v",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1J4V6ViVmg6U5AYHp00s0vbAtiQdKtC0v']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d448784-6be3-528c-8ee9-5363a2170114",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1aeWamA0wM7R784YwjZ_mTkLW4KgckWxY",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1aeWamA0wM7R784YwjZ_mTkLW4KgckWxY']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:43:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cbec60c-772b-5f23-85fd-1e86af1e97c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1K__K_WYQNKy1fCdP3ics5n6P-RgtfhDy",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1K__K_WYQNKy1fCdP3ics5n6P-RgtfhDy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:43:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc80035d-5662-57f2-8862-86d4b0a601db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1Dhot3WrRghjcWEfHHajeBEpW8jy0N8Fu",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1Dhot3WrRghjcWEfHHajeBEpW8jy0N8Fu']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--290c9ab9-4c0c-56ad-8461-cf3ee63396f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1cP3rGgOnP5qrfs67hI61ctZYSft97ZAN",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1cP3rGgOnP5qrfs67hI61ctZYSft97ZAN']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85951459-acf1-5796-9a4c-4da6f621a874",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1gQu2gDfdL5YpUWFw2n8kDGSAj_bS81Vc",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1gQu2gDfdL5YpUWFw2n8kDGSAj_bS81Vc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:42:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--621d37a4-8a71-5392-b2d0-f3e8dd57a0dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://183.149.40.166:46758/i",
      "pattern": "[url:value = 'http://183.149.40.166:46758/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee3261da-5953-5071-ba03-08d11d591aca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.53.227.140:53118/i",
      "pattern": "[url:value = 'http://42.53.227.140:53118/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d72204d1-a845-5693-a4ed-c139b708769c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1kxjEA0riYRXmxHBYs2wDDsB9qLow0LdG",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1kxjEA0riYRXmxHBYs2wDDsB9qLow0LdG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8015bfc-dabb-51bc-95ec-87c991e0c8c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1c4MP9PUB8CC-16cUvI88mAKOktfUN90m",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1c4MP9PUB8CC-16cUvI88mAKOktfUN90m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--150eba29-f4ee-53af-aaf1-6cb50150a9b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1YIG7DOblHF_bleLcPyNPR5F64Mr8zOMk",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1YIG7DOblHF_bleLcPyNPR5F64Mr8zOMk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6323526d-5ba8-52aa-89e8-fb9776a3f602",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1hljQAuZc4JREUpOXnMmYwJFZ2EHbRan_",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1hljQAuZc4JREUpOXnMmYwJFZ2EHbRan_']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f49ef1b3-1257-5a15-975c-8f781fb98dab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1rnVkfnJ9ig1e3_FJq8JsQuyBGrvu9Vl6",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1rnVkfnJ9ig1e3_FJq8JsQuyBGrvu9Vl6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8825227e-ec61-5039-ad1d-3c53ed2dc17f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1A2f7RKedJUTV3T_7hit5Ya-Ooy0SJP-r",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1A2f7RKedJUTV3T_7hit5Ya-Ooy0SJP-r']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:41:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fc3e70b-65d5-550b-a4ae-f6aab3cc8fe0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.93.138.64:43603/i",
      "pattern": "[url:value = 'http://112.93.138.64:43603/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:40:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43f531c5-e6e7-5c0e-b08d-149c135268f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1oZT9Sdo_nTVRZAM0KX4DbZxtcrm_lul2",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1oZT9Sdo_nTVRZAM0KX4DbZxtcrm_lul2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:40:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5136320-2d18-5ee0-b45f-56aace1a8a09",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.247.134:46868/i",
      "pattern": "[url:value = 'http://123.4.247.134:46868/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86746964-7556-56a8-a23c-720d02f4f7e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1Ao1ZFhbzDmkZUHXGXnktXoIfaoM8FV5w",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1Ao1ZFhbzDmkZUHXGXnktXoIfaoM8FV5w']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6255007a-4c9d-5cc6-b89b-eb7c00835c18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1dNh5j9_YOQhLKfcAOPf98UfSeQH5KcRs",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1dNh5j9_YOQhLKfcAOPf98UfSeQH5KcRs']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40a63e4e-3e56-51d5-a481-da130dfcbce9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1x3DfL4D_TjtEZRbuJQc_ksbASwPAZKhh",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1x3DfL4D_TjtEZRbuJQc_ksbASwPAZKhh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f9e3866-151f-510b-993b-e70db3343147",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1mq_PorVRyuqZw86IdAJmfVQYP4C9NUER",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1mq_PorVRyuqZw86IdAJmfVQYP4C9NUER']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48f70fb0-e207-51ca-8a2d-f2330d254eca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uecvehp.amoozeshagazade.shop/f07bfc62-7aca-4ff9-9955-b23f60bd3705",
      "pattern": "[url:value = 'https://uecvehp.amoozeshagazade.shop/f07bfc62-7aca-4ff9-9955-b23f60bd3705']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9120f3c-7a94-5840-ba5e-31f2ccdb8473",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-267b3d8f426d4d9ca10e514a1933f21b.r2.dev/befuzolxv.png",
      "pattern": "[url:value = 'https://pub-267b3d8f426d4d9ca10e514a1933f21b.r2.dev/befuzolxv.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:35:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94681e9f-ff7b-5d90-96d8-2f38abd3deff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-27c93f4f89e1465b9c1287f8d108b525.r2.dev/dawci87cncfu.png",
      "pattern": "[url:value = 'https://pub-27c93f4f89e1465b9c1287f8d108b525.r2.dev/dawci87cncfu.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:35:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86890b5e-4613-5cbb-a729-499e31205ef2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pastefy.app/OOYrGc5d/raw",
      "pattern": "[url:value = 'https://pastefy.app/OOYrGc5d/raw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862211/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20feb1be-bb8b-5ba4-af27-235b273bced8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/GonnaWilma",
      "pattern": "[url:value = 'https://paste.sensio.no/GonnaWilma']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0650630f-7f3e-5152-9da7-57d51016b586",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://remolcares.us/stub.ps1",
      "pattern": "[url:value = 'https://remolcares.us/stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:31:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ebaed6b-5187-559f-a9e6-7cbf3ab49dff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://141.11.17.254/JOHNS.png",
      "pattern": "[url:value = 'http://141.11.17.254/JOHNS.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:29:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc316104-8b9b-5011-84c6-b964e57ed918",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://zihnyunrui.com/xwor.png",
      "pattern": "[url:value = 'http://zihnyunrui.com/xwor.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:29:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b2f1039-f0c3-5d16-833a-4ffa92b388f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://zihnyunrui.com/sking.png",
      "pattern": "[url:value = 'http://zihnyunrui.com/sking.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:29:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f766622-d07d-5e3b-bbbc-1d89440f8492",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://zihnyunrui.com/xobs.png",
      "pattern": "[url:value = 'http://zihnyunrui.com/xobs.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:29:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--caeff7bc-a151-5e95-928b-0273dd6ca7e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://141.11.17.254/JOHN_MSI.png",
      "pattern": "[url:value = 'http://141.11.17.254/JOHN_MSI.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:29:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--602ecf61-8ac4-5564-b667-8a4741d403ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.vame.be/qwertyuiop.png",
      "pattern": "[url:value = 'http://www.vame.be/qwertyuiop.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:21:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f3a11e3-239a-58d2-a737-766764091580",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.vame.be/zxcvbnm.png",
      "pattern": "[url:value = 'http://www.vame.be/zxcvbnm.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:21:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6dc1785-5897-5723-9150-742e972b4c69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.vame.be/wffd/update.ps1",
      "pattern": "[url:value = 'http://www.vame.be/wffd/update.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:21:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f945ace6-4556-5046-9551-7b6e0a45d00c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.81.217.45:36789/i",
      "pattern": "[url:value = 'http://39.81.217.45:36789/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77ad6075-449d-54d9-bc79-a31e3d18979a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://firdgorl.restaurantguideaarhus.com/6b0022ad-4930-4176-91b3-4a4e8038c4c9",
      "pattern": "[url:value = 'https://firdgorl.restaurantguideaarhus.com/6b0022ad-4930-4176-91b3-4a4e8038c4c9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:19:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33c97d4f-8654-5169-955c-4cfe6c8bf215",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/img/1.jpg",
      "pattern": "[url:value = 'http://107.172.13.211/img/1.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b24058c-f571-522e-9574-a2cec668e702",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.169.186:58803/bin.sh",
      "pattern": "[url:value = 'http://125.41.169.186:58803/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85976276-2bca-5b8d-8b37-38ed9ef93bc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.169.186:58803/i",
      "pattern": "[url:value = 'http://125.41.169.186:58803/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:12:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e93aa1fc-c9e4-56f7-ae42-4c0aba7691cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s4x5yd7i.anodaz.store/?ublib=2fd1588d-6e99-4243-929e-b31156d6195d",
      "pattern": "[url:value = 'https://s4x5yd7i.anodaz.store/?ublib=2fd1588d-6e99-4243-929e-b31156d6195d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T08:05:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f01704e9-d050-58fe-8484-804e5a0653db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.178.249.120:46373/bin.sh",
      "pattern": "[url:value = 'http://119.178.249.120:46373/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9539bd8d-168f-50ca-8e71-f7a3cef10bb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.29.220:44632/i",
      "pattern": "[url:value = 'http://182.112.29.220:44632/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9966b473-bc36-58e1-ab67-149419a3d652",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.178.249.120:46373/i",
      "pattern": "[url:value = 'http://119.178.249.120:46373/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:55:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--696cd2b8-bb3e-58e2-b01c-7dd459dbb075",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.121.158:58900/i",
      "pattern": "[url:value = 'http://182.127.121.158:58900/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06bbe091-4ac9-5ac4-b8e0-741e9a69bd02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xmwofxxy.winxbet.co/950da333-99fc-4797-a8dd-616967cabf88",
      "pattern": "[url:value = 'https://xmwofxxy.winxbet.co/950da333-99fc-4797-a8dd-616967cabf88']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:41:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b891d380-1896-52d3-8c39-23e5cfa019a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://oxzqss.azmoonzare.online/720d6b14-6cf6-4a4b-b0da-0ea60d867c7c",
      "pattern": "[url:value = 'https://oxzqss.azmoonzare.online/720d6b14-6cf6-4a4b-b0da-0ea60d867c7c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2553553b-02ce-5a2a-b24a-84e0c0e8e965",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://0xln2imp.yekbetiran.com/?ublib=d00a3c77-6835-47c0-8ee5-51319a66cb45",
      "pattern": "[url:value = 'https://0xln2imp.yekbetiran.com/?ublib=d00a3c77-6835-47c0-8ee5-51319a66cb45']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e827ccee-e276-5357-8148-b342f1dff89c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rkbvh5p1.parspoker.casino/?ublib=933a6553-1820-422c-9c36-cdca534fd415",
      "pattern": "[url:value = 'https://rkbvh5p1.parspoker.casino/?ublib=933a6553-1820-422c-9c36-cdca534fd415']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a653936-cc2f-563d-a8bc-9b36532264f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.93.245:60780/i",
      "pattern": "[url:value = 'http://163.142.93.245:60780/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:25:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15a7d9c6-7193-521e-b19f-160bbfb22be7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://brenmayasociados.com/sass/optimized_MSIyu.png",
      "pattern": "[url:value = 'https://brenmayasociados.com/sass/optimized_MSIyu.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:23:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d241e0d3-1b83-525b-a3a9-9ff27f460ab4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://brenmayasociados.com/sass/djoku.png",
      "pattern": "[url:value = 'https://brenmayasociados.com/sass/djoku.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:23:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4421284-121c-5540-b68a-f0badd4efc9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://muaklekcoop.com/ckfinder/php.exe",
      "pattern": "[url:value = 'https://muaklekcoop.com/ckfinder/php.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:21:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6a25e16-245d-5164-97a8-64805d9880bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pjekei.azmoonzare.online/f32adadf-efc9-46c9-883b-a07606c53221",
      "pattern": "[url:value = 'https://pjekei.azmoonzare.online/f32adadf-efc9-46c9-883b-a07606c53221']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:14:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32eaac9a-ef78-5a41-b283-f9c271ba544b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vohgvv.jamjahani.football/e8f85459-1443-47a2-b93d-a9af1e6b8a53",
      "pattern": "[url:value = 'https://vohgvv.jamjahani.football/e8f85459-1443-47a2-b93d-a9af1e6b8a53']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cf487ea-87ec-507f-ba79-cc2e57355789",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cbawrwwb.wrfc8.com/40b076fe-4da3-42ea-8578-7c2d33546338",
      "pattern": "[url:value = 'https://cbawrwwb.wrfc8.com/40b076fe-4da3-42ea-8578-7c2d33546338']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--896c329c-f120-58ed-aa70-8d847a123551",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.53.209.7:36007/i",
      "pattern": "[url:value = 'http://115.53.209.7:36007/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:02:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edc3d642-636c-55de-bfa9-a9b4273ac455",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.114.3:57615/i",
      "pattern": "[url:value = 'http://115.55.114.3:57615/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:02:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a860eb8-c4e8-5afb-876f-300242b46767",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.249.170:59207/i",
      "pattern": "[url:value = 'http://182.112.249.170:59207/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T07:00:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e3a772-3882-57e5-a5a4-91f93818a8cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://198.12.83.82/22/weneedbestthingswithbetterplacestocomebackgoodfor.js",
      "pattern": "[url:value = 'http://198.12.83.82/22/weneedbestthingswithbetterplacestocomebackgoodfor.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:53:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec089c7b-9026-535b-9e81-aa503060a598",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://dogalhayat.space/dashboard/myfiles/sinduu9/zIaHAmGfE4Bx1oD.exe",
      "pattern": "[url:value = 'http://dogalhayat.space/dashboard/myfiles/sinduu9/zIaHAmGfE4Bx1oD.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:53:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--065bd70e-381d-5e2e-9005-89c7258f9df1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://198.12.83.82/22/enc/weneedbestsolutionsforme.hta",
      "pattern": "[url:value = 'http://198.12.83.82/22/enc/weneedbestsolutionsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ee7c6c8-3879-54d3-8e6b-7c336906fdc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://178.17.58.125/City101/nova_logs_2.dat",
      "pattern": "[url:value = 'https://178.17.58.125/City101/nova_logs_2.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9433465c-8bcc-5941-8ff0-d98e44c60138",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/400/img_015511.png",
      "pattern": "[url:value = 'http://107.172.13.211/400/img_015511.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:48:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b54ea23d-6f29-5720-835b-52bb07cbb305",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/400/howdougetmebackwithbestthingsforme.hta",
      "pattern": "[url:value = 'http://107.172.13.211/400/howdougetmebackwithbestthingsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:48:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3ba0a87-713b-5d7e-9b63-14745184b05f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/300/img_014511.png",
      "pattern": "[url:value = 'http://107.172.13.211/300/img_014511.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:47:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--def9eab8-9608-520a-b57c-c8b2773501a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/300/becomeperfecthistimeforbestproperthings.hta",
      "pattern": "[url:value = 'http://107.172.13.211/300/becomeperfecthistimeforbestproperthings.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1b69e81-7ffa-50c5-a101-f22c3e60582b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1LMYLvuIMeXof5vQctGYd9pWGZhZZEWnB",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1LMYLvuIMeXof5vQctGYd9pWGZhZZEWnB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:46:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7b5788b-f413-550d-975a-008338220355",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://45.129.231.1/bin/support.client.exe",
      "pattern": "[url:value = 'https://45.129.231.1/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:45:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0da1b7d-f893-57bb-bdcf-c91ebb97a855",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://45.129.231.1/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://45.129.231.1/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:45:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2008c3e1-1c01-5dfd-9efe-cc93d7e86f5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://eaty6go0.anodaz.co/?ublib=8249396e-0f6c-4aa6-aae3-49da6ef5c803",
      "pattern": "[url:value = 'https://eaty6go0.anodaz.co/?ublib=8249396e-0f6c-4aa6-aae3-49da6ef5c803']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4453980-b0f7-5450-9ad3-15c754d9ff1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://193.142.146.101/bin/support.client.exe",
      "pattern": "[url:value = 'https://193.142.146.101/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:44:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a61c7ac6-d00a-58eb-8237-ec18c0d36ba0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://193.142.146.101/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://193.142.146.101/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06ffec9c-26aa-5a81-aade-b62bc4278427",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://141.98.10.30/bin/support.client.exe",
      "pattern": "[url:value = 'http://141.98.10.30/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:43:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--167c1a8a-0ec9-5ebc-b9b6-8539a0f05319",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://79.124.8.44/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://79.124.8.44/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50af5991-81b6-586c-ada3-052f2d0555c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://79.124.8.44/bin/support.client.exe",
      "pattern": "[url:value = 'https://79.124.8.44/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a0b49b7-6326-5fc7-b29f-2a0ebe415b4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://94.141.122.148/bin/support.client.exe",
      "pattern": "[url:value = 'https://94.141.122.148/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05fa2637-8afb-5cbd-b080-42f633c4db1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://203.159.90.82/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://203.159.90.82/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdc6dc56-3b6d-5d25-85fd-88cad38b673c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://94.141.122.148/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://94.141.122.148/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aed0604-48eb-53d4-a35e-a75d36bba54e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://203.159.90.82/bin/support.client.exe",
      "pattern": "[url:value = 'https://203.159.90.82/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:41:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a75f4dee-e9b9-51c4-85cb-a97a63b157f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://178.16.52.66/bin/support.client.exe",
      "pattern": "[url:value = 'https://178.16.52.66/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:40:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea251786-e96a-5eb8-8683-61485dc76016",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://178.16.52.66/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://178.16.52.66/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:40:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6565d7f0-16a5-5cd4-8ba8-ff2b901c1adb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://178.16.52.221/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://178.16.52.221/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d64baaa-7b11-5d43-bd85-5d1b881410b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://178.16.52.221/bin/support.client.exe",
      "pattern": "[url:value = 'http://178.16.52.221/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80761834-659e-5d5f-930a-0cf2fc52704e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/Client.exe",
      "pattern": "[url:value = 'http://196.251.107.104/Client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d822e4a-0783-5f19-98eb-b74591eadd67",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.246.87.147:45726/i",
      "pattern": "[url:value = 'http://110.246.87.147:45726/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:38:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2d8cf01-889f-5bb1-9114-dead31a83b31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.114.3:57615/bin.sh",
      "pattern": "[url:value = 'http://115.55.114.3:57615/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:33:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cb47e4c-2422-54cf-bb54-807c376bd627",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://3sdhx6qp.pokerbazi.app/?ublib=2d45fa7c-834d-4c88-bf6b-20ff31067b40",
      "pattern": "[url:value = 'https://3sdhx6qp.pokerbazi.app/?ublib=2d45fa7c-834d-4c88-bf6b-20ff31067b40']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f22a8efc-a1c0-58d4-8f75-d0b0283f9a25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.154.175.241:33815/i",
      "pattern": "[url:value = 'http://219.154.175.241:33815/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:31:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--765be126-488f-5d83-a7c8-b7a6e94deb3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uknwgsop.red90.casino/18fc17d8-afe0-4b19-8a7f-f913d0d0498f",
      "pattern": "[url:value = 'https://uknwgsop.red90.casino/18fc17d8-afe0-4b19-8a7f-f913d0d0498f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:29:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--015c6399-299c-5e76-bd28-6cc08cb23306",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/x86_64",
      "pattern": "[url:value = 'http://16.171.16.1/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ade4aa34-f404-53e2-bb1a-159e3aae6b4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/x86",
      "pattern": "[url:value = 'http://16.171.16.1/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9313c4f6-ac1f-5bda-b60b-998e03e25a7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/ppc64",
      "pattern": "[url:value = 'http://16.171.16.1/ppc64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d061f2c2-f55b-5752-96c8-2f32cef848f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/armv7l",
      "pattern": "[url:value = 'http://16.171.16.1/armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11f0de07-80d1-5df3-9d6f-fb5a20ff3636",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/i686",
      "pattern": "[url:value = 'http://16.171.16.1/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e40cf58c-f691-56d0-bd34-6bd79ecfb2b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/armv5l",
      "pattern": "[url:value = 'http://16.171.16.1/armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6d92892-f8ae-56be-8d88-f529a5926fb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/mipsel",
      "pattern": "[url:value = 'http://16.171.16.1/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9916bec-e3f4-57b2-b1b6-e4371b7d58ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://122.157.66.34:55687/bin.sh",
      "pattern": "[url:value = 'http://122.157.66.34:55687/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c160ea0-8470-5a17-9b95-32dddce50cd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/armv6l",
      "pattern": "[url:value = 'http://16.171.16.1/armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:27:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95245a98-8e88-5c88-9c98-9bd47a83773e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.156.87.82/main_x86_64",
      "pattern": "[url:value = 'http://45.156.87.82/main_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:20:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95df92c4-678f-5cb4-b782-3ccdd01e5a1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.mipsel",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57faa1ee-dea7-55c1-ad02-777446cd3bda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.arm5",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfcc1d15-7238-5ac7-a0a2-80f05b7b1cb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.m68k",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24d59a24-aefc-5848-86a6-ce0fb714ee87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.arm",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76e773fd-b5d5-5120-a37c-1305e5ffa372",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.sh4",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3b54d5f-7c4c-517e-afb7-571aa7749a0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.sparc",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08a03d57-cf09-56dc-b095-37444aec29f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.ppc",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45c68c27-9660-555d-aeee-dc2246beb96d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.i686",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d7ee91e-7a8c-5754-802c-7ebae3417ea0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.arm7",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2480696f-9b56-5a9e-95a5-8a70650cb332",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.x86",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--718e791b-dda9-5900-a0f2-db8c68a346e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.mips",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--895832cc-4f0f-525b-99cf-7d3ff2e3da47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.x86_64",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--079a14fd-77f3-50c7-bcf5-efd60c4adb98",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.154.98.128/FBI.arm6",
      "pattern": "[url:value = 'http://45.154.98.128/FBI.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d823f3cb-f15b-5efb-8da0-c15c94ff0ac8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://77.91.96.41/svchost.exe",
      "pattern": "[url:value = 'http://77.91.96.41/svchost.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cf84e22-c1d5-5299-9dcf-9b319c74eb50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.214.78.247/client.exe",
      "pattern": "[url:value = 'http://91.214.78.247/client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:18:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bb0ef71-edf4-5f61-ace9-847f389241a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://204.76.203.54/y",
      "pattern": "[url:value = 'http://204.76.203.54/y']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:15:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d25aad55-3000-567c-8d84-0715fa2b59ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://muaklekcoop.com/ckfinder/core/js/hilton.exe",
      "pattern": "[url:value = 'https://muaklekcoop.com/ckfinder/core/js/hilton.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:11:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--292a29ff-c1a1-5f1d-a96a-be7cf380c8df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://muaklekcoop.com/ckfinder/core/js/acr-g1upd-639159296668701809.exe",
      "pattern": "[url:value = 'https://muaklekcoop.com/ckfinder/core/js/acr-g1upd-639159296668701809.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:11:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b6d1482-dc59-5b7d-88c9-13afcab8e99e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://muaklekcoop.com/ckfinder/core/js/phpjquery.php",
      "pattern": "[url:value = 'https://muaklekcoop.com/ckfinder/core/js/phpjquery.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:11:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ae35950-096e-5366-8a16-83ce8852c59c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.154.175.241:33815/bin.sh",
      "pattern": "[url:value = 'http://219.154.175.241:33815/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:06:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81ecc1de-4273-53f3-92f3-a1db427feb64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.206.245:32843/bin.sh",
      "pattern": "[url:value = 'http://182.113.206.245:32843/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T06:01:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bf7999d-c87c-536e-92e5-127dc2cf6e98",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://162.255.251.91:48255/i",
      "pattern": "[url:value = 'http://162.255.251.91:48255/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:55:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec4cc7f0-66b0-5be6-8e69-196b718fddd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.201.90:40944/i",
      "pattern": "[url:value = 'http://219.155.201.90:40944/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:54:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cc07c1f-8129-51ad-ac8d-aff2b45cceb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.55.83:37749/i",
      "pattern": "[url:value = 'http://42.224.55.83:37749/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:49:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35fdd9a5-54be-50e7-8822-7038352a65cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jxsofena.shartbandi.games/bd930980-0370-4700-88fc-ae872d578401",
      "pattern": "[url:value = 'https://jxsofena.shartbandi.games/bd930980-0370-4700-88fc-ae872d578401']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c47a31d7-ee24-5758-8a3d-2dcf81a50456",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1YSPEx-8waKpINY-q6E6wm84offF01b-N",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1YSPEx-8waKpINY-q6E6wm84offF01b-N']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--deeaf10b-e0f2-57ed-95b3-81086dc66714",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1kjS-QdePCiQsa2IdKZ75ZpQegLx9fhCh",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1kjS-QdePCiQsa2IdKZ75ZpQegLx9fhCh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:41:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b85f4da1-e2d0-50f5-875d-7124958bc4de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.201.90:40944/bin.sh",
      "pattern": "[url:value = 'http://219.155.201.90:40944/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:40:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cbad66a-75a3-5b34-9b7a-c35b89943c94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://142.93.47.76/bins/arc",
      "pattern": "[url:value = 'http://142.93.47.76/bins/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85d0a70b-cba6-5772-833d-0ccd8b6cd87e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uuyplunruss.vercel.app/?download=1",
      "pattern": "[url:value = 'https://uuyplunruss.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa3e34aa-154e-5d60-be86-3bb9ce04c0cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wwwwwess.vercel.app/?download=1",
      "pattern": "[url:value = 'https://wwwwwess.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0bd8b09-1618-54a0-a124-55fa5eb3469c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.26.106.236/bins/arm7",
      "pattern": "[url:value = 'http://94.26.106.236/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78e02952-5040-5cd8-a031-4ffd21c20ada",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/arm",
      "pattern": "[url:value = 'http://16.171.16.1/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2ba7b78-b790-5680-9d2f-4e9317523714",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rosdtp-site.vercel.app/?download=1",
      "pattern": "[url:value = 'https://rosdtp-site.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dbc5c7e-032d-5cff-b973-029e7c5592dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ruproishestvie2026.vercel.app/?download=1",
      "pattern": "[url:value = 'https://ruproishestvie2026.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d15b041f-fd89-542b-ac11-e8f0e9612cbe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.26.106.236/bins/test_sys",
      "pattern": "[url:value = 'http://94.26.106.236/bins/test_sys']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20ed25d6-6ed9-5e20-a77a-9004e14f0696",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.26.106.236/bins/test_conn",
      "pattern": "[url:value = 'http://94.26.106.236/bins/test_conn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa12a15a-c816-5685-ba88-d80def6aba3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/mips",
      "pattern": "[url:value = 'http://16.171.16.1/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32856967-0723-5405-95ae-42cfc2dba582",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.26.106.236/bins/test_min",
      "pattern": "[url:value = 'http://94.26.106.236/bins/test_min']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9dad3a4-02e6-53ec-9a96-0e28a28e1251",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.26.106.236/bins/bot.debug",
      "pattern": "[url:value = 'http://94.26.106.236/bins/bot.debug']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80cd40f3-5b44-53a9-95e7-c42fa65b2fc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.156.152.234/run.sh",
      "pattern": "[url:value = 'http://94.156.152.234/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c699b888-7d9b-55b5-a823-1a15ef08d0ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://169.40.104.99/bbc",
      "pattern": "[url:value = 'http://169.40.104.99/bbc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25bb8195-b9ae-5675-842e-78b65c2c88d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://16.171.16.1/run.sh",
      "pattern": "[url:value = 'http://16.171.16.1/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--510d96ca-f25b-58ee-94be-956e073df92b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/FlSz",
      "pattern": "[url:value = 'http://188.132.232.81/FlSz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:54Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b2dd840-8e30-5085-8b6f-60053757afb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/lr6",
      "pattern": "[url:value = 'http://188.132.232.81/lr6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:53Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e3117a-6b3b-5393-a523-5dfb9ea0ef0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/EJ9G",
      "pattern": "[url:value = 'http://188.132.232.81/EJ9G']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:53Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0445013-b3ef-55a8-8834-a832dbbf45a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/9qr",
      "pattern": "[url:value = 'http://188.132.232.81/9qr']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:53Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10a01b38-6652-5fc5-a9bb-04abff6ba085",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/SiOX",
      "pattern": "[url:value = 'http://188.132.232.81/SiOX']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:53Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9178ee6a-45b3-5954-b8a1-99df10bcf313",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/GMl",
      "pattern": "[url:value = 'http://188.132.232.81/GMl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862076/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--819b3299-b225-5c61-a960-a5af6146103e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/TW0",
      "pattern": "[url:value = 'http://188.132.232.81/TW0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862077/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec656ae5-e347-5f6b-a6f1-5d3fb7c6feb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/COy",
      "pattern": "[url:value = 'http://188.132.232.81/COy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862078/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d61c4b5-538e-5f1c-b7b2-92a6ead682a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/BFfY",
      "pattern": "[url:value = 'http://188.132.232.81/BFfY']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862079/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--044b9582-88b5-599f-a05d-5c0244a21125",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/iqp",
      "pattern": "[url:value = 'http://188.132.232.81/iqp']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862080/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--321d4c6f-6c31-5402-a3b9-693a0be5a17f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/677N",
      "pattern": "[url:value = 'http://188.132.232.81/677N']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3c36b9f-c1d0-5cb4-9a91-691b16bc2ac1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/nps",
      "pattern": "[url:value = 'http://188.132.232.81/nps']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51a9499e-0cb0-5084-a1bd-fcf1130923ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/aebfb6",
      "pattern": "[url:value = 'http://45.205.1.59/aebfb6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b43762b-29ff-5a83-96b3-f58a45de2faa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ecfb54",
      "pattern": "[url:value = 'http://45.205.1.59/ecfb54']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46ede1e6-0ebd-51a4-9a9f-8661df65e0d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/3e35df",
      "pattern": "[url:value = 'http://45.205.1.59/3e35df']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--021dfa5e-6100-589a-bf8b-e6b3be953fe9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/41622b",
      "pattern": "[url:value = 'http://45.205.1.59/41622b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--898ab5a7-de3f-5050-9279-6f1c6a043b80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/bfO",
      "pattern": "[url:value = 'http://188.132.232.81/bfO']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:52Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74341fcb-1643-5c47-b17c-7e503c9588cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e03a9e",
      "pattern": "[url:value = 'http://45.205.1.59/e03a9e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:50Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862073/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7b3db4f-e521-5f6a-83e4-ae28a77e0362",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0f9833",
      "pattern": "[url:value = 'http://45.205.1.59/0f9833']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:50Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862074/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0692944e-c55f-57d0-a95c-95609cd58db8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/6W5",
      "pattern": "[url:value = 'http://188.132.232.81/6W5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:50Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862075/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5e977bb-1aed-58ac-b6db-ff8c12fc638b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/9VB",
      "pattern": "[url:value = 'http://188.132.232.81/9VB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862070/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73816032-62b5-5f49-82ef-35e0313b6b80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/8PVT",
      "pattern": "[url:value = 'http://188.132.232.81/8PVT']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862071/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76ead5e3-1ed1-5fb4-825e-1e2d4fe9cb03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/4pbY",
      "pattern": "[url:value = 'http://188.132.232.81/4pbY']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862072/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0f9c7a8-6c53-5629-8b6e-7dbd8529aefe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Mod1",
      "pattern": "[url:value = 'http://188.132.232.81/Mod1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862069/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40f80110-4dba-55ac-be2a-75f5db72011a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ISZ",
      "pattern": "[url:value = 'http://188.132.232.81/ISZ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862068/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53795e90-d2ed-5d87-8434-be9b17cffce9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/3aEI",
      "pattern": "[url:value = 'http://188.132.232.81/3aEI']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862064/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2d148c8-b5ea-55f0-801f-903f66df71b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/msjK",
      "pattern": "[url:value = 'http://188.132.232.81/msjK']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862065/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86450b96-477a-5e08-a1f6-3303f2f90503",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1aa4b9",
      "pattern": "[url:value = 'http://45.205.1.59/1aa4b9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862066/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff511480-2a14-509d-b628-9f76e1c6cbf2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cbe298",
      "pattern": "[url:value = 'http://45.205.1.59/cbe298']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862067/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9aba403f-2de2-5441-9d51-d656f5b777fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/JkK",
      "pattern": "[url:value = 'http://188.132.232.81/JkK']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862063/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03ba0b7d-f88a-56ab-a098-cf01b8b3a436",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/06e11c",
      "pattern": "[url:value = 'http://45.205.1.59/06e11c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862061/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54ee06f5-e927-5ee6-8a0c-5b990735efa9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/976318",
      "pattern": "[url:value = 'http://45.205.1.59/976318']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862062/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dda43abd-fc25-50a9-a09e-b41234f82d62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/M2j9",
      "pattern": "[url:value = 'http://188.132.232.81/M2j9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862058/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4799452c-02d5-55e7-9490-f98ea77ede6a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/xEwA",
      "pattern": "[url:value = 'http://188.132.232.81/xEwA']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862059/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd6a9103-3a18-5732-b0d1-90ee439c47fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/DiN",
      "pattern": "[url:value = 'http://188.132.232.81/DiN']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862060/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--247b455e-99e5-5e77-90c6-349542eb05ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/vft2",
      "pattern": "[url:value = 'http://188.132.232.81/vft2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862027/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b6e149a-19e2-59e6-a0d4-3a6b7e329875",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/qI9",
      "pattern": "[url:value = 'http://188.132.232.81/qI9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862028/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ac735be-56fa-5572-8650-bd56c6919f32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/5C4",
      "pattern": "[url:value = 'http://188.132.232.81/5C4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862029/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee696c9a-c537-51a6-a833-5b07836f96d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/xMK",
      "pattern": "[url:value = 'http://188.132.232.81/xMK']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862030/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14bf2b05-9251-54cf-a6e0-a28ed87ca234",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/VAZ",
      "pattern": "[url:value = 'http://188.132.232.81/VAZ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862031/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--994bf53b-41f9-5274-b077-f6ec19b367e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Wdxq",
      "pattern": "[url:value = 'http://188.132.232.81/Wdxq']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862032/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2063044-3ed9-50eb-8d9b-00cee7145112",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/AYi",
      "pattern": "[url:value = 'http://188.132.232.81/AYi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862033/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6320be9-fb57-50ac-b7af-fffe3c25b780",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/GgX",
      "pattern": "[url:value = 'http://188.132.232.81/GgX']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862034/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fc4bb9b-3add-5d4f-b244-b6d0f75ba7dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/lxz",
      "pattern": "[url:value = 'http://188.132.232.81/lxz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862035/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67948017-d420-517b-8c03-165677069654",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/yue",
      "pattern": "[url:value = 'http://188.132.232.81/yue']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862036/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e617f7d-b3b8-5a79-8791-f089e9bec1b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/L0S",
      "pattern": "[url:value = 'http://188.132.232.81/L0S']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862037/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1551e56-979d-56ab-bc8e-f75cff1c2e70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/tTx",
      "pattern": "[url:value = 'http://188.132.232.81/tTx']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862038/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--987c2226-6d09-5f3f-9f16-e15cbed7a713",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ewRM",
      "pattern": "[url:value = 'http://188.132.232.81/ewRM']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862039/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e49021-b1f0-5569-8b3d-6e7e81691e49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/tzo",
      "pattern": "[url:value = 'http://188.132.232.81/tzo']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862040/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee3e7d39-f191-5d7b-84b4-302cf11b3f84",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/hYO",
      "pattern": "[url:value = 'http://188.132.232.81/hYO']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862041/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4abc4def-1ae3-5f37-9ed2-8b449bb99284",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/AuG",
      "pattern": "[url:value = 'http://188.132.232.81/AuG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862042/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78559fbd-dacf-5b1d-b75f-67ead90702bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Ii4",
      "pattern": "[url:value = 'http://188.132.232.81/Ii4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862043/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acf4246d-8890-5a7d-acc2-7eb416fa1cf3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/jzj",
      "pattern": "[url:value = 'http://188.132.232.81/jzj']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862044/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa536aed-406a-5324-82b1-530aa8b4e29c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a2153f",
      "pattern": "[url:value = 'http://45.205.1.59/a2153f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862045/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42eda7cb-d827-5042-95d0-0e7d4f88ab95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/07815c",
      "pattern": "[url:value = 'http://45.205.1.59/07815c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862046/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5a270ad-5733-5848-ade4-712b3c09ac76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ee8f35",
      "pattern": "[url:value = 'http://45.205.1.59/ee8f35']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862047/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b910c0ca-a78e-5144-81e1-33de55be0b35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/85ad92",
      "pattern": "[url:value = 'http://45.205.1.59/85ad92']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862048/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9967706e-2ca6-56e8-95a5-1011c5704d9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4c6ac2",
      "pattern": "[url:value = 'http://45.205.1.59/4c6ac2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862049/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4cbf502-1316-5c98-9d75-e9fb58874e3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/73490f",
      "pattern": "[url:value = 'http://45.205.1.59/73490f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862050/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fd0042b-8e5b-5fe3-babc-a8f938297943",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/3b0f2b",
      "pattern": "[url:value = 'http://45.205.1.59/3b0f2b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862051/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46447d75-3628-5ce4-a9ce-c22e1f7f0fcd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a5dfa2",
      "pattern": "[url:value = 'http://45.205.1.59/a5dfa2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862052/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--413f95cd-d655-5733-8ed2-596a784e2028",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0cc697",
      "pattern": "[url:value = 'http://45.205.1.59/0cc697']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862053/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd8711c6-14d7-5934-b37e-5f5e103892cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/fd5b2f",
      "pattern": "[url:value = 'http://45.205.1.59/fd5b2f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862054/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd2b5681-5487-5440-a895-6ec5d6caf476",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c5d305",
      "pattern": "[url:value = 'http://45.205.1.59/c5d305']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862055/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd948644-e75e-51ac-a630-bf7afc63b139",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f95318",
      "pattern": "[url:value = 'http://45.205.1.59/f95318']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862056/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d56d281f-2c03-58b4-bd29-72ccf7ec2b7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/kEaq",
      "pattern": "[url:value = 'http://188.132.232.81/kEaq']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862057/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6e35914-2b8c-51d0-bf4c-946c4def1a40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/oiE",
      "pattern": "[url:value = 'http://188.132.232.81/oiE']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862026/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ef8f991-5e42-5132-a8a3-dba3738596a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/veMy",
      "pattern": "[url:value = 'http://188.132.232.81/veMy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862024/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e69117f9-cdf1-51c4-929e-91670ac0a3b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/fEWy",
      "pattern": "[url:value = 'http://188.132.232.81/fEWy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862025/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f2c7230-b5d4-5f7c-962e-efa6509cf445",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/0Zz",
      "pattern": "[url:value = 'http://188.132.232.81/0Zz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862023/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c71db58a-d9e8-5df1-ab07-89677fd737b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/4oE",
      "pattern": "[url:value = 'http://188.132.232.81/4oE']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862022/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a44ce2a-422e-55d1-84af-e66ad4fa595d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/j3K",
      "pattern": "[url:value = 'http://188.132.232.81/j3K']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862021/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da561759-277b-5587-be65-f4760edea5b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/VOEi",
      "pattern": "[url:value = 'http://188.132.232.81/VOEi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862020/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2771163-db61-55c8-a757-951cadf92801",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Wtfh",
      "pattern": "[url:value = 'http://188.132.232.81/Wtfh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862018/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5690977b-bf29-54d2-8526-8ee8e20d8350",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/262b70",
      "pattern": "[url:value = 'http://45.205.1.59/262b70']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862019/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--533c2686-d522-540f-821f-227d6c3c804c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/r2W",
      "pattern": "[url:value = 'http://188.132.232.81/r2W']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862017/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30d82f3f-16e8-5b8c-be08-f6e755d345e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/TvBR",
      "pattern": "[url:value = 'http://188.132.232.81/TvBR']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862014/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--027b3039-c5f9-56f7-87aa-58bbfd1a9aaa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/citM",
      "pattern": "[url:value = 'http://188.132.232.81/citM']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862015/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e7fd998-3dd6-5146-b268-3e3df34dd2e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/bcb12b",
      "pattern": "[url:value = 'http://45.205.1.59/bcb12b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862016/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3935152-35fe-54a6-ab82-d50697b9adba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rg6u6kf7.pokeray.com/?ublib=bc148ba5-6631-462f-85df-4aace6ca2d8c",
      "pattern": "[url:value = 'https://rg6u6kf7.pokeray.com/?ublib=bc148ba5-6631-462f-85df-4aace6ca2d8c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862013/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67c0f7bc-8685-596b-975b-75564a88a22b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://162.255.251.91:48255/bin.sh",
      "pattern": "[url:value = 'http://162.255.251.91:48255/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862012/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--793f5de9-5fbe-59a7-b934-3e4ff62bb0f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://122.157.66.34:55687/i",
      "pattern": "[url:value = 'http://122.157.66.34:55687/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862011/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff73d9d5-ebfa-5da9-907f-3971261957a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://yfzhr93v.parsbet90.com/?ublib=f356d43a-1e50-4a2d-8b36-bdb1e3ab177a",
      "pattern": "[url:value = 'https://yfzhr93v.parsbet90.com/?ublib=f356d43a-1e50-4a2d-8b36-bdb1e3ab177a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:25:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862010/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c992f2de-a981-5850-ab7a-51db822c84ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hremhf.jamjahani2026.football/acd4bcba-cdef-4f85-a261-cfacac334a2c",
      "pattern": "[url:value = 'https://hremhf.jamjahani2026.football/acd4bcba-cdef-4f85-a261-cfacac334a2c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:20:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862009/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c79f3ba1-4ce8-5af2-b525-bb7599dcfa36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nllxfcjp.shartbandi.games/5565362f-e772-40c7-8b86-d0c8aae74143",
      "pattern": "[url:value = 'https://nllxfcjp.shartbandi.games/5565362f-e772-40c7-8b86-d0c8aae74143']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:15:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862008/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9868f24-42c4-524e-82b7-044d25f17ae7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://85.15.124.98:45724/bin.sh",
      "pattern": "[url:value = 'http://85.15.124.98:45724/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:08:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862007/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cef608f-3ce5-50a8-9e9c-10cd7fbf9b4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.186.230.50:55772/i",
      "pattern": "[url:value = 'http://110.186.230.50:55772/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T05:02:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862006/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0a10239-48e6-5919-a573-4daf79121988",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.206.11:43393/i",
      "pattern": "[url:value = 'http://125.44.206.11:43393/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T04:58:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862005/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc6409f6-bc9a-5eb5-b167-a71b56d538b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.46.133.49:44143/i",
      "pattern": "[url:value = 'http://125.46.133.49:44143/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T04:44:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862004/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfba1624-d477-5df3-906f-adf2ec513d4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qnsvnvkk.shartbandi.casino/733d7611-f486-4f26-b6f1-a2b83e62d0c3",
      "pattern": "[url:value = 'https://qnsvnvkk.shartbandi.casino/733d7611-f486-4f26-b6f1-a2b83e62d0c3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T04:37:03Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862003/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--294b36da-1b76-5019-82d5-fb1809498672",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.228.163:41102/bin.sh",
      "pattern": "[url:value = 'http://110.39.228.163:41102/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T04:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862002/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f739926-6f91-545e-b76d-0f59721893b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.10.230.114:44681/i",
      "pattern": "[url:value = 'http://123.10.230.114:44681/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T04:12:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862001/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31923ca7-62cc-5b42-a7bb-dab929e33c20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vvoplgpy.bet303.poker/5d5f69a8-2e22-4213-9dab-6f1a94dc31fa",
      "pattern": "[url:value = 'https://vvoplgpy.bet303.poker/5d5f69a8-2e22-4213-9dab-6f1a94dc31fa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T04:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3862000/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--425f24b5-6761-57f8-ba76-88e905adaf22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.173.15:38658/i",
      "pattern": "[url:value = 'http://123.5.173.15:38658/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T04:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861999/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f06cae8-b912-5918-9f47-4dc75ab306f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://95.56.232.109:59652/i",
      "pattern": "[url:value = 'http://95.56.232.109:59652/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:58:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861998/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--498fc6be-ee18-5f84-950c-3c569a774d63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://avemod.cc/archive/archived.zip",
      "pattern": "[url:value = 'https://avemod.cc/archive/archived.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:51:50Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861997/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1e2418c-7007-5f27-8469-2d7aaaf98090",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.161.107:47422/i",
      "pattern": "[url:value = 'http://182.127.161.107:47422/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861996/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e95eaaa9-a9a6-590a-98dd-bb82996d9cdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.173.15:38658/bin.sh",
      "pattern": "[url:value = 'http://123.5.173.15:38658/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:32:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861995/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71f783bd-a4f6-5ab9-8ba9-9059bc861ff5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.56.46:38532/i",
      "pattern": "[url:value = 'http://182.119.56.46:38532/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:31:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861993/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b76e6910-de22-58f1-a9de-286e81dbb5ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://180.190.203.41:45211/bin.sh",
      "pattern": "[url:value = 'http://180.190.203.41:45211/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:31:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861994/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dbaccd9-346d-58dc-a382-9023d33cffe3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.142:41753/i",
      "pattern": "[url:value = 'http://46.236.65.142:41753/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:31:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861992/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a644fc74-6ef0-5a74-a898-b116e863877d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.95.197:44861/i",
      "pattern": "[url:value = 'http://221.15.95.197:44861/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861991/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--847a78c4-d428-5b3c-8217-88a3cba55990",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://8zktknmf.shirbetfarsi.com/?ublib=5e9f2c30-6af3-4b5c-a727-f216c548770f",
      "pattern": "[url:value = 'https://8zktknmf.shirbetfarsi.com/?ublib=5e9f2c30-6af3-4b5c-a727-f216c548770f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861990/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1df65653-0d18-548d-855d-781dd9921808",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vqfqrqgv.red90.casino/6050a730-332e-48f6-98fd-0e9f5f541034",
      "pattern": "[url:value = 'https://vqfqrqgv.red90.casino/6050a730-332e-48f6-98fd-0e9f5f541034']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861989/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99fd2eef-5331-5a0b-a7e3-007753895007",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.56.46:38532/bin.sh",
      "pattern": "[url:value = 'http://182.119.56.46:38532/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861988/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0917c6bc-91b6-554f-8d72-32d77ea8fe85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.15.1:52647/i",
      "pattern": "[url:value = 'http://110.36.15.1:52647/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:22:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861987/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--598a0d8a-2b1b-5c7a-9f7b-e160870cd017",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.1.18:46782/i",
      "pattern": "[url:value = 'http://182.113.1.18:46782/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861986/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f95bb437-feab-585c-956b-fee800aeebb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hylfko.pishbinibet.casino/2a97e74d-840f-49a0-af2c-861841aa78a2",
      "pattern": "[url:value = 'https://hylfko.pishbinibet.casino/2a97e74d-840f-49a0-af2c-861841aa78a2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T03:15:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861985/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7094d17c-ecfb-59cc-84ad-ccdd1f52bfe8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.142:41753/bin.sh",
      "pattern": "[url:value = 'http://46.236.65.142:41753/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:58:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861984/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--425a2392-9c58-503c-bbbc-ae067b735838",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.99.178.233:57690/i",
      "pattern": "[url:value = 'http://203.99.178.233:57690/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:52:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861983/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb167f77-5028-521a-8602-d5dbcf914e61",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.121.47:46479/i",
      "pattern": "[url:value = 'http://27.215.121.47:46479/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861982/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4575e2a-d5d5-5806-bfec-01a077578d56",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.2.23:58860/i",
      "pattern": "[url:value = 'http://110.36.2.23:58860/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:49:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861981/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d642d44-6476-5e63-8433-0ee1b9a66e96",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lxhcemuk.wrfc8.com/12f626fb-8127-4690-84d2-fadcd4386738",
      "pattern": "[url:value = 'https://lxhcemuk.wrfc8.com/12f626fb-8127-4690-84d2-fadcd4386738']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:41:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861980/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f2aa5c-5174-5831-918e-b42203ffbf78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.28.183:45089/i",
      "pattern": "[url:value = 'http://110.36.28.183:45089/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861979/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1d18c9c-cd90-50e7-968c-25c54f987843",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.28.183:45089/bin.sh",
      "pattern": "[url:value = 'http://110.36.28.183:45089/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:35:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861978/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30243e50-7ec9-5a00-940a-785597cfcffe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.77.15:39496/i",
      "pattern": "[url:value = 'http://110.36.77.15:39496/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:27:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861977/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f76978a-9af8-5186-89b9-574ec4638393",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.99.178.233:57690/bin.sh",
      "pattern": "[url:value = 'http://203.99.178.233:57690/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:25:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861976/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec023519-8a53-582a-b567-cd81b36717a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.2.23:58860/bin.sh",
      "pattern": "[url:value = 'http://110.36.2.23:58860/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861975/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48b809bd-06f6-57fd-b34a-775d6e69c854",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.74.34:46527/bin.sh",
      "pattern": "[url:value = 'http://42.224.74.34:46527/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:22:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861974/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34f70041-76ba-5865-af1e-12be7d4be7a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.225.21:52528/i",
      "pattern": "[url:value = 'http://115.55.225.21:52528/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:06:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861973/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--983a5e35-dee7-5778-a8e6-33a6cd8911aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qpemifog.winxbet.co/a8fbe3a9-741c-4aa9-bbaa-6a2e227d5b47",
      "pattern": "[url:value = 'https://qpemifog.winxbet.co/a8fbe3a9-741c-4aa9-bbaa-6a2e227d5b47']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T02:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861972/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--759142fd-f868-59f6-ae78-ea03b87fe58c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.119.63:53153/i",
      "pattern": "[url:value = 'http://125.42.119.63:53153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:52:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861971/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4e0e833-7b84-52c9-a4e1-ae335f053c5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.119.63:53153/bin.sh",
      "pattern": "[url:value = 'http://125.42.119.63:53153/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:50:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861970/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--464fc76a-3ec6-5402-99d3-3aafc1899d59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.225.21:52528/bin.sh",
      "pattern": "[url:value = 'http://115.55.225.21:52528/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:39:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861969/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9a5a08e-a90c-59c1-97e6-9f0fef2ff238",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.171:34523/i",
      "pattern": "[url:value = 'http://110.36.80.171:34523/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:39:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861968/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fe37baf-d57f-5d02-b361-a4c00e9ecf03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.7.179:57385/i",
      "pattern": "[url:value = 'http://221.15.7.179:57385/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861967/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e44061-333e-53b3-aac4-b6f866263f8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.171:34523/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.171:34523/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:34:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861965/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8092e1c5-1796-579c-8585-af44e86d989f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.58.115:37144/bin.sh",
      "pattern": "[url:value = 'http://125.44.58.115:37144/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:34:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861966/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d44b97d-dd21-5696-b3b9-58dd76ffcb21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://izlayynu.winsportiran.com/6f0f03b7-4382-4f14-85bb-03ec041c1ff9",
      "pattern": "[url:value = 'https://izlayynu.winsportiran.com/6f0f03b7-4382-4f14-85bb-03ec041c1ff9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:28:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861964/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eddb730-dbef-5338-94fc-8dd55abb0d8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.1.200:54317/i",
      "pattern": "[url:value = 'http://110.36.1.200:54317/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861963/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4da68b16-d352-5709-b040-575316e6ecc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.253.55.162:52310/i",
      "pattern": "[url:value = 'http://83.253.55.162:52310/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:25:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861962/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--067f66e1-3c9a-5891-9d28-1b93d524fbe0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://yhsgyl.pishbinisite.com/9862427e-73c0-4cd8-9570-4569b5993a25",
      "pattern": "[url:value = 'https://yhsgyl.pishbinisite.com/9862427e-73c0-4cd8-9570-4569b5993a25']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861961/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78ce339b-3e3f-5773-b3a0-38058c7b60a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://o6k7lcz5.shartbazi.net/?ublib=dc5e2406-7d6e-46fc-ab40-f2368a7c0751",
      "pattern": "[url:value = 'https://o6k7lcz5.shartbazi.net/?ublib=dc5e2406-7d6e-46fc-ab40-f2368a7c0751']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861960/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28a32389-295d-5636-b5da-3405f1888d7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.190.133.180:34160/i",
      "pattern": "[url:value = 'http://196.190.133.180:34160/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:07:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861959/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72166edf-1aa2-55a9-9bfc-88ec5f73a01f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.1.200:54317/bin.sh",
      "pattern": "[url:value = 'http://110.36.1.200:54317/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:02:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861958/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5326dea-6dd0-5996-a30c-867565c80a98",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.253.55.162:52310/bin.sh",
      "pattern": "[url:value = 'http://83.253.55.162:52310/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T01:00:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861957/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a2451f5-3272-52b5-a4f0-4491f321f6c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.185.242.64:43470/i",
      "pattern": "[url:value = 'http://119.185.242.64:43470/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:51:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861956/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47f7ef6f-858e-57b2-b4e9-20b96a3879b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.139.69.47:52153/i",
      "pattern": "[url:value = 'http://222.139.69.47:52153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:47:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861955/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b2dbd3f-a78c-5b37-85c4-f7377ff2fccc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jqjvvqpy.one1x.bet/bd331615-0107-4848-be95-6c8b24c5bf78",
      "pattern": "[url:value = 'https://jqjvvqpy.one1x.bet/bd331615-0107-4848-be95-6c8b24c5bf78']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:45:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861954/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1adfe138-3a9c-50d8-a19d-479bbea33c45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.190.133.180:34160/bin.sh",
      "pattern": "[url:value = 'http://196.190.133.180:34160/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:43:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861953/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fc940c4-06c8-5c0e-a3d1-06819f3517e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://5ronk1lr.pointsbetiran.com/?ublib=166d075a-0b85-4891-83ae-bf76d2675a63",
      "pattern": "[url:value = 'https://5ronk1lr.pointsbetiran.com/?ublib=166d075a-0b85-4891-83ae-bf76d2675a63']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:35:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861952/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45fb4e75-1a18-56c1-8536-efbcf50e982e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://120.28.193.170:35442/i",
      "pattern": "[url:value = 'http://120.28.193.170:35442/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861951/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef771713-7a95-597e-baa2-c986eb45f434",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.39.32:43683/i",
      "pattern": "[url:value = 'http://110.37.39.32:43683/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:27:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861950/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd3a72f5-56a7-5137-b54f-3f4bf33cd048",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.228.163:41102/i",
      "pattern": "[url:value = 'http://110.39.228.163:41102/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861949/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aa001e3-e5a2-592d-955f-2c5b82546a1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.185.242.64:43470/bin.sh",
      "pattern": "[url:value = 'http://119.185.242.64:43470/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:25:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861948/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52744580-c81d-5430-a994-1285a339dfdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dxssnlzn.penalty.casino/0fcb22b1-9baa-46bf-a8a9-54a7092002ce",
      "pattern": "[url:value = 'https://dxssnlzn.penalty.casino/0fcb22b1-9baa-46bf-a8a9-54a7092002ce']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:08:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861947/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1d326c2-8ab1-5574-9238-5ce80e32f3c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.52.39.77:45266/bin.sh",
      "pattern": "[url:value = 'http://42.52.39.77:45266/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-10T00:06:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861946/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5008be2f-0fa1-5dc3-b778-ef5bd78dda08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.53.193.229:60681/i",
      "pattern": "[url:value = 'http://115.53.193.229:60681/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861945/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac9f2a4b-1193-5054-9b4d-836d85444c59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.179.228.121:33094/i",
      "pattern": "[url:value = 'http://123.179.228.121:33094/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:34:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861944/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c5efbf6-742e-5113-a4c0-25a9e2f69985",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://7kblrgq1.shartbazi.com/?ublib=928ef172-bb63-412e-8f45-0af70dc5c2f4",
      "pattern": "[url:value = 'https://7kblrgq1.shartbazi.com/?ublib=928ef172-bb63-412e-8f45-0af70dc5c2f4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:34:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861943/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28060e97-9be7-58a9-b025-937eb93e98be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mnhunimj.persian.sex/1d39f034-147c-4d7f-9d7e-1403923bc909",
      "pattern": "[url:value = 'https://mnhunimj.persian.sex/1d39f034-147c-4d7f-9d7e-1403923bc909']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861942/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--072efdf3-15d3-5411-9e2a-8a6e42cc75dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.53.193.229:60681/bin.sh",
      "pattern": "[url:value = 'http://115.53.193.229:60681/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861941/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1782dd30-790a-5c6b-8351-2290d646391c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bjyqjg.onlineshart.com/1e3941d2-207e-459e-ad04-bfb5908da817",
      "pattern": "[url:value = 'https://bjyqjg.onlineshart.com/1e3941d2-207e-459e-ad04-bfb5908da817']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:18:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861940/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be5238c4-4751-5689-8121-609dfa54467b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://w02eza6e.plinkoirani.com/?ublib=14a90149-ffb8-4c79-9dff-7ea24eb569a6",
      "pattern": "[url:value = 'https://w02eza6e.plinkoirani.com/?ublib=14a90149-ffb8-4c79-9dff-7ea24eb569a6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861939/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f68adb3-3d32-5058-97d6-a2d0c90f80b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.179.228.121:33094/bin.sh",
      "pattern": "[url:value = 'http://123.179.228.121:33094/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861938/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dca8ecf-4b96-5a9d-a1aa-02a80c921212",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/881715592/CZXvnUD.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/881715592/CZXvnUD.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T23:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861937/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed0516ee-57c4-580b-bdcb-647c70a8b186",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://epxigqr.tagat120art.com/2caebf3d-fd07-41d6-87e8-af5879e28b16",
      "pattern": "[url:value = 'https://epxigqr.tagat120art.com/2caebf3d-fd07-41d6-87e8-af5879e28b16']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T22:50:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861936/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19cdb1ee-c00d-5415-947b-798ca67c7623",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.23.216:53262/i",
      "pattern": "[url:value = 'http://110.36.23.216:53262/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T22:28:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861935/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aa13512-599b-555c-903b-eea316629afc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.23.216:53262/bin.sh",
      "pattern": "[url:value = 'http://110.36.23.216:53262/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T22:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861934/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--696f8071-99bb-5baa-87b9-d08de901acad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://swzbdpb.poker-online.bet/da94216c-de8f-4925-8b6e-193ae9287f0d",
      "pattern": "[url:value = 'https://swzbdpb.poker-online.bet/da94216c-de8f-4925-8b6e-193ae9287f0d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T22:11:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861933/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98e6d9c8-695f-5ef8-86ec-f0dc44ab163f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.97.250.241:43380/i",
      "pattern": "[url:value = 'http://59.97.250.241:43380/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T22:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861932/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbfb0826-002c-5a5a-b7a4-b21c57737063",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.226.243:55378/i",
      "pattern": "[url:value = 'http://123.12.226.243:55378/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:58:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861931/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47aad55d-3926-5097-9f76-958a23f48dea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.97.250.241:43380/bin.sh",
      "pattern": "[url:value = 'http://59.97.250.241:43380/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:41:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861930/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a608f4a3-0230-598a-af6b-40d61104db94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.209.163:42730/i",
      "pattern": "[url:value = 'http://110.38.209.163:42730/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861929/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5a9e1d0-a78c-5fe2-b6f9-ef752533d66b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.7.232:42490/i",
      "pattern": "[url:value = 'http://219.157.7.232:42490/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:35:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861928/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--583f361f-0780-51e0-8d1b-a79de27b3b3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wwwydzo.penaltibazi.com/207cc6bd-0b75-486d-9164-1a03c16032f2",
      "pattern": "[url:value = 'https://wwwydzo.penaltibazi.com/207cc6bd-0b75-486d-9164-1a03c16032f2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:33:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861926/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e74bfa54-5137-580f-9686-668b81d1bbdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://56c1ukt9.shart303.net/?ublib=938bd58f-afa9-4379-8e53-79d881e70d75",
      "pattern": "[url:value = 'https://56c1ukt9.shart303.net/?ublib=938bd58f-afa9-4379-8e53-79d881e70d75']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:33:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861927/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45e3e404-2122-5a76-86cc-5ab533b12bfc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.226.243:55378/bin.sh",
      "pattern": "[url:value = 'http://123.12.226.243:55378/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:31:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861925/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48ef6118-61bf-5407-8670-e2dc8707c680",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.17.16.209:56063/i",
      "pattern": "[url:value = 'http://60.17.16.209:56063/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:23:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861924/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf7af57a-acb6-5e3b-a6a3-e63be8de9def",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ppwbda.jamjahani.cash/0c1d2236-2607-4456-890d-2fb6d354d0d5",
      "pattern": "[url:value = 'https://ppwbda.jamjahani.cash/0c1d2236-2607-4456-890d-2fb6d354d0d5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:14:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861923/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca82f29a-8813-5dfa-afb0-a7bc1bc11320",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/Progressive_8127.75.4792_INSTALL.exe",
      "pattern": "[url:value = 'http://196.251.107.104/Progressive_8127.75.4792_INSTALL.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:10:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861922/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--317be6ea-760e-5eab-9a9c-4ec2d910243d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.66.64:50119/i",
      "pattern": "[url:value = 'http://110.37.66.64:50119/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:07:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861921/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8676ef26-8f64-5eeb-afed-4c23b45ade9b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.58.198:57669/i",
      "pattern": "[url:value = 'http://182.127.58.198:57669/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T21:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861920/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d08db7d7-d56f-5e3f-9234-49d8c4cc5f98",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.7.232:42490/bin.sh",
      "pattern": "[url:value = 'http://219.157.7.232:42490/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861919/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d360d12-9536-5b9c-9643-2e5c8f5998fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.72.243:48852/i",
      "pattern": "[url:value = 'http://110.36.72.243:48852/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:55:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861918/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0914f3aa-d9cd-57ff-8368-2caa958ecd92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://srninwh.one1xbet.net/8eb8c65d-3942-4a87-abf0-3f63a46597a2",
      "pattern": "[url:value = 'https://srninwh.one1xbet.net/8eb8c65d-3942-4a87-abf0-3f63a46597a2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:54:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861917/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--821497eb-1f57-5fb6-92d3-a0fb58a7810f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.66.64:50119/bin.sh",
      "pattern": "[url:value = 'http://110.37.66.64:50119/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:50:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861916/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--167032f8-1dbf-5522-b944-37656fc493a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.28.45:42742/i",
      "pattern": "[url:value = 'http://110.36.28.45:42742/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:49:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861915/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d7e71cd-d0a5-576f-93a9-6f7a73119111",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.79.236.129:58909/bin.sh",
      "pattern": "[url:value = 'http://39.79.236.129:58909/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861914/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27d1f7de-61b3-58fa-bb67-c5bb4c2d0040",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.58.198:57669/bin.sh",
      "pattern": "[url:value = 'http://182.127.58.198:57669/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:31:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861913/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c85e67a-cee8-5cda-9ffe-5c6d939360ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.120.98:55299/i",
      "pattern": "[url:value = 'http://182.127.120.98:55299/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:29:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861912/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dadaf94b-7d88-5c28-82d5-ab1aeb20b5c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.231.44:55185/i",
      "pattern": "[url:value = 'http://123.12.231.44:55185/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:16:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861911/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--005d3510-3d35-5276-ab29-17ba944dd08f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hqtzavl.mangobetfarsi.com/8f09fdab-6b61-4f39-850e-f7c8727313c2",
      "pattern": "[url:value = 'https://hqtzavl.mangobetfarsi.com/8f09fdab-6b61-4f39-850e-f7c8727313c2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T20:16:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861910/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c79a5943-cca7-564a-8d85-8eabcd807d7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.6",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:56:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861908/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cea20b5f-6909-5e4a-9d03-7423e1e90318",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.8",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:56:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861909/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3dbf1f4a-6d4f-5942-a4f3-17724c5fbcdd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.2",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:55:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861905/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cfa56aa-5253-54eb-900f-4ae1ab131f9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.13",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.13']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:55:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861906/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6452eb5-5f30-5417-b322-f869ee3335be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.7",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:55:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861907/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d49a61f9-ef72-5333-b9d4-812a6cca4f42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.10",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.10']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:55:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861904/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c754cfef-1c49-57bb-aa30-c46187f2611e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.5",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861899/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09639533-6618-57cc-b970-70b0313979a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.11",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.11']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861900/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f24cb93b-2964-5199-ba31-f5a22ebd094c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.4",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861901/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfd90665-cb8e-5f70-a2ae-aa2e605369ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.1",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861902/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60a27324-ea98-57ef-9b50-ae32ba944f85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.9",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861903/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b8fc95d-f736-5d59-96f3-c2c65d5f2644",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.50.3.72:59256/i",
      "pattern": "[url:value = 'http://115.50.3.72:59256/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:50:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861898/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49b9b0e8-e7c8-58ba-8345-25876e50b9d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.23.138:45876/i",
      "pattern": "[url:value = 'http://42.224.23.138:45876/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:48:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861897/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--febc28d5-1a22-56de-a1f6-465ee3f33e32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.7.10/eat/some/godisdead.3",
      "pattern": "[url:value = 'http://152.236.7.10/eat/some/godisdead.3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:47:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861896/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f7a1786-22d2-5b7d-993d-bf8d3502dd51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.48.198:39278/i",
      "pattern": "[url:value = 'http://182.116.48.198:39278/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861895/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcfa5abd-aa15-5dd7-8722-fee182fff4a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.50.3.72:59256/bin.sh",
      "pattern": "[url:value = 'http://115.50.3.72:59256/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:42:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861894/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d150512-7079-5b8d-9871-b2ecdbc43698",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.93.136.65:41074/i",
      "pattern": "[url:value = 'http://112.93.136.65:41074/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861893/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0a634f4-cda0-5a91-aa20-feeca8d197a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://scvnivk.sabaad724.bet/80dd9442-9199-4419-a093-8583419d7c23",
      "pattern": "[url:value = 'https://scvnivk.sabaad724.bet/80dd9442-9199-4419-a093-8583419d7c23']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:37:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861892/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4170e589-aa59-5112-9d1f-637434cc5d1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.24.84.178:60210/i",
      "pattern": "[url:value = 'http://125.24.84.178:60210/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861891/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2157fa18-a547-596d-a312-bc4ffbb42c5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jcrlq1o7.sabzbet.bet/?ublib=487bda20-f4f6-48d6-8d83-6b8dd0a39e6f",
      "pattern": "[url:value = 'https://jcrlq1o7.sabzbet.bet/?ublib=487bda20-f4f6-48d6-8d83-6b8dd0a39e6f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:32:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861890/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fda9a44-5325-5d8b-b0dc-05d5c0a7cec3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://80.27.83.195/sh",
      "pattern": "[url:value = 'https://80.27.83.195/sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:28:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861889/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2130f83b-93fe-5f30-aafd-7ee4a041bbb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.19.51:35269/i",
      "pattern": "[url:value = 'http://110.36.19.51:35269/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:28:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861888/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--508021cd-29a1-564d-b757-e0ecf620fa63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.19.51:35269/bin.sh",
      "pattern": "[url:value = 'http://110.36.19.51:35269/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:24:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861887/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d93befeb-80d1-54bf-81bf-3a7a6b776191",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.232.161.156:43604/i",
      "pattern": "[url:value = 'http://123.232.161.156:43604/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861886/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d02c6ee2-5a02-5308-92de-3a6f2a807396",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tmeypq.perfectgame.casino/41e0e0ac-c290-4a2f-b3c2-3af73a9d6851",
      "pattern": "[url:value = 'https://tmeypq.perfectgame.casino/41e0e0ac-c290-4a2f-b3c2-3af73a9d6851']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861885/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bd4ccf8-5273-586e-b27a-0045affdd4a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.186.206.223:59934/i",
      "pattern": "[url:value = 'http://119.186.206.223:59934/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:07:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861884/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7eeed825-fc54-5eff-b17c-8b5028c8707c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.93.137.77:48312/i",
      "pattern": "[url:value = 'http://112.93.137.77:48312/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:06:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861883/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd3509a7-30c8-53b1-83a1-ed568e4b051d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.83.154:41396/bin.sh",
      "pattern": "[url:value = 'http://125.40.83.154:41396/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861882/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ebb6c74-48aa-5ad4-bbfc-b644a50b5d2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.93.137.196:34093/i",
      "pattern": "[url:value = 'http://112.93.137.196:34093/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:03:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861881/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b587cb3-334c-5a1a-906f-16adc545480c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.118.236.154:51439/i",
      "pattern": "[url:value = 'http://119.118.236.154:51439/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T19:03:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861880/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcc4ab25-a814-5d3d-90b4-f4c679a304aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rywwahl.romabet90.bet/1ece8d56-2f95-4220-85a8-74a2eb1387b5",
      "pattern": "[url:value = 'https://rywwahl.romabet90.bet/1ece8d56-2f95-4220-85a8-74a2eb1387b5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:59:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861879/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7afebbdf-906e-5388-acdf-20ccd107a057",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.134.19:8080/badger_x64_stealth_rtl.bin",
      "pattern": "[url:value = 'http://176.65.134.19:8080/badger_x64_stealth_rtl.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:56:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861878/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc712576-0ad2-5855-820c-5e42211071a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://58.255.43.56:50746/i",
      "pattern": "[url:value = 'http://58.255.43.56:50746/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:54:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861877/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b753b72c-4979-5024-b102-778b5116aef0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.249.216.4:40353/bin.sh",
      "pattern": "[url:value = 'http://112.249.216.4:40353/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:52:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861876/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c7fc82d-be7c-521e-b8d1-02bc70cf485b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.93.137.115:49663/i",
      "pattern": "[url:value = 'http://112.93.137.115:49663/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861875/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f03f3fd-5843-5b78-9442-7d0e0da3dae6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.75.86:44584/i",
      "pattern": "[url:value = 'http://125.40.75.86:44584/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:47:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861874/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--592df7fc-2ea2-5140-9221-2bbe25dfffb5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.118.236.154:51439/bin.sh",
      "pattern": "[url:value = 'http://119.118.236.154:51439/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:40:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861873/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae42abe2-e9cb-59dd-b1b7-9786efd6d307",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://canigrup.top/img_140606.png",
      "pattern": "[url:value = 'https://canigrup.top/img_140606.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:36:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861872/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7724d746-e1c9-503c-a9cf-b0a71429a15f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mnoledglin.top/cgi-contents/uizbfzgbzsevdbsrfnfservvfhbrjvrnbegjngbvfneevffgwmvnf/ehfbsdf.exe",
      "pattern": "[url:value = 'https://mnoledglin.top/cgi-contents/uizbfzgbzsevdbsrfnfservvfhbrjvrnbegjngbvfneevffgwmvnf/ehfbsdf.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:36:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861871/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1699f4c-21aa-521d-ba91-93d90ea0be69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://canigrup.top/optimized_MSI.png",
      "pattern": "[url:value = 'https://canigrup.top/optimized_MSI.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861870/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74c46901-b013-5faa-ae8f-49f1f98429df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://git.nightcord.online/nightcord/nightcord/releases/download/v1.18.5/Nightcord-Installer.exe",
      "pattern": "[url:value = 'https://git.nightcord.online/nightcord/nightcord/releases/download/v1.18.5/Nightcord-Installer.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:35:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861869/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c872502-ad68-553b-b20f-0decad865ee0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.186.206.223:59934/bin.sh",
      "pattern": "[url:value = 'http://119.186.206.223:59934/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861868/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e3b69e-648a-5e85-87df-a320686561f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.75.86:44584/bin.sh",
      "pattern": "[url:value = 'http://125.40.75.86:44584/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:23:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861867/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b632955b-c9e7-594c-9acc-10c4d9f27955",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://deltaexecutorvip.xyz/x.bat",
      "pattern": "[url:value = 'https://deltaexecutorvip.xyz/x.bat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:21:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861866/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2ed3200-a8c2-50bc-9acb-e1547bcf448d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://deltahub.vip/delta.hta",
      "pattern": "[url:value = 'https://deltahub.vip/delta.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861865/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87ce7061-3fd3-5250-b13b-508daf76ac00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xepjlus.riverpoker1.com/89480ade-f160-42d4-a780-9e59d8d6ea48",
      "pattern": "[url:value = 'https://xepjlus.riverpoker1.com/89480ade-f160-42d4-a780-9e59d8d6ea48']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861864/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6f2c5d0-5e53-5ddc-8e29-6da115fa1ec7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://1tzunno5.onexboro.com/?ublib=92b40ead-ec25-4ecf-85a5-f34deb3d55af",
      "pattern": "[url:value = 'https://1tzunno5.onexboro.com/?ublib=92b40ead-ec25-4ecf-85a5-f34deb3d55af']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:17:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861863/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c7c367e-8e24-5cd2-944f-ac8e93eca394",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.88.109:58208/i",
      "pattern": "[url:value = 'http://110.37.88.109:58208/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:12:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861862/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d720fff-476b-5de4-9f5c-1ac0fa99d987",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://183.158.170.177:46989/i",
      "pattern": "[url:value = 'http://183.158.170.177:46989/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861861/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39ed0dc0-95b6-5359-b563-980cb545c3c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://spasopro.at/Lsge63sd3/Plugins/clip64.dll",
      "pattern": "[url:value = 'http://spasopro.at/Lsge63sd3/Plugins/clip64.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861860/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e6d16e-39f5-5857-b9ef-c050d861cbde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://spasopro.at/Lsge63sd3/Plugins/clip.dll",
      "pattern": "[url:value = 'http://spasopro.at/Lsge63sd3/Plugins/clip.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:01:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861858/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db129679-6f0c-5ddd-826c-0d19ac46d722",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://spasopro.at/Lsge63sd3/okey.exe",
      "pattern": "[url:value = 'http://spasopro.at/Lsge63sd3/okey.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:01:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861859/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91f402dd-5831-515a-b2a3-8bf2be4440a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://spasopro.at/Lsge63sd3/Plugins/cred.dll",
      "pattern": "[url:value = 'http://spasopro.at/Lsge63sd3/Plugins/cred.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861856/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03495c0f-64ec-5d06-be0e-614e5578a21d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://spasopro.at/Lsge63sd3/Plugins/cred64.dll",
      "pattern": "[url:value = 'http://spasopro.at/Lsge63sd3/Plugins/cred64.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T18:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861857/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18b1d0a8-eb13-510c-a066-ee5de32fb002",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/Amadey.exe",
      "pattern": "[url:value = 'http://196.251.107.104/Amadey.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:59:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861855/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8515815d-e8d5-5269-a4cc-561e696d2187",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/tkr.exe",
      "pattern": "[url:value = 'http://196.251.107.104/tkr.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861854/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4f827cc-46ad-55b9-87bd-4f912fde58b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.7.153.220:35209/i",
      "pattern": "[url:value = 'http://123.7.153.220:35209/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:47:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861853/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fccbd50c-ecce-50f0-b785-fec68ab1b163",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lrucuzu.rika90.bet/5d7b4297-0d2f-4348-be83-9cd079265887",
      "pattern": "[url:value = 'https://lrucuzu.rika90.bet/5d7b4297-0d2f-4348-be83-9cd079265887']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861852/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86c8e289-2354-51e4-b0ad-b5e45062f441",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.47.56:50862/i",
      "pattern": "[url:value = 'http://182.127.47.56:50862/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:39:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861851/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3ff2767-a00d-539b-aee0-1443552f5454",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://cat.xiaoshabi.nl/mon.txt",
      "pattern": "[url:value = 'http://cat.xiaoshabi.nl/mon.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:38:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861849/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc04d394-d27c-5751-9c78-31b21e1197e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://cat.xiaoshabi.nl/min.txt",
      "pattern": "[url:value = 'http://cat.xiaoshabi.nl/min.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:38:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861850/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--747d5344-fbd2-57ba-9959-e2a63ecea5d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://cat.xiaoshabi.nl/uas.txt",
      "pattern": "[url:value = 'http://cat.xiaoshabi.nl/uas.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861848/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54483444-0bd7-560d-bc5a-4d2954269653",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://cat.xiaoshabi.nl/cohernece.txt",
      "pattern": "[url:value = 'http://cat.xiaoshabi.nl/cohernece.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861846/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21d92c66-0a21-55cb-971d-38e7d64190a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://cat.xiaoshabi.nl/access.txt",
      "pattern": "[url:value = 'http://cat.xiaoshabi.nl/access.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861847/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7f5b4dc-3d2f-50ae-b3f9-70c9561a2d21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.192.243:48754/i",
      "pattern": "[url:value = 'http://182.121.192.243:48754/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:37:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861845/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9213838a-3c93-56f9-a4e2-926e5542d94f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://z08omixf.mrbet90.com/?ublib=2949ed60-087c-44d5-979f-bb9873a2d26f",
      "pattern": "[url:value = 'https://z08omixf.mrbet90.com/?ublib=2949ed60-087c-44d5-979f-bb9873a2d26f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861844/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e042f99a-64e2-587b-af00-76b350be8476",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.148.150.106:53521/i",
      "pattern": "[url:value = 'http://175.148.150.106:53521/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861843/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4e43b5e-79ee-50d5-870b-1c0e4cbf68ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.7.153.220:35209/bin.sh",
      "pattern": "[url:value = 'http://123.7.153.220:35209/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:26:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861842/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bad11df8-83da-5452-95e9-14f19613148d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.27.178:42960/bin.sh",
      "pattern": "[url:value = 'http://125.40.27.178:42960/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:24:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861841/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d678b281-9baf-5a6d-8cb0-bdab286a160c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vdsina.vg/",
      "pattern": "[url:value = 'https://vdsina.vg/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861840/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aced7a6-b1ec-59cd-b5f7-36f7a5892fa3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/arm7",
      "pattern": "[url:value = 'http://217.60.195.70:8080/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:20:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861837/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efd772fc-971c-5a56-bcf3-f8c28008a5c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/i686",
      "pattern": "[url:value = 'http://217.60.195.70:8080/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:20:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861838/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6b00617-a687-5f66-a623-42304acac315",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/mpsl",
      "pattern": "[url:value = 'http://217.60.195.70:8080/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:20:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861839/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc545118-9f3e-5e7b-b265-44fd7ed05679",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/arm5",
      "pattern": "[url:value = 'http://217.60.195.70:8080/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:20:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861835/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f18ca40a-d228-5435-8748-a51e8630860d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/spc",
      "pattern": "[url:value = 'http://217.60.195.70:8080/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:20:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861836/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12b75db8-bf3e-567d-aa14-3b68e6794d1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/sh4",
      "pattern": "[url:value = 'http://217.60.195.70:8080/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:19:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861834/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e0c6b82-1ea4-5f2b-9b85-3d3a3140fd6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/arm4",
      "pattern": "[url:value = 'http://217.60.195.70:8080/arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:19:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861833/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51e8851a-9cc2-52e6-848a-267afbb43d26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/arc",
      "pattern": "[url:value = 'http://217.60.195.70:8080/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:19:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861832/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d145d1bc-a738-5c7f-985b-b9159fc45447",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/m68k",
      "pattern": "[url:value = 'http://217.60.195.70:8080/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861828/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a61baffb-7cc1-55cd-ad6b-1bf4fd250c44",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/ppc",
      "pattern": "[url:value = 'http://217.60.195.70:8080/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861829/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bb8c547-7cf5-541d-926c-a809d51e666b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/mips",
      "pattern": "[url:value = 'http://217.60.195.70:8080/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861830/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f11ccc15-848b-50c8-8efd-1165385ffbd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/arm6",
      "pattern": "[url:value = 'http://217.60.195.70:8080/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861831/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--092d265e-2bbe-5178-99e2-45ec11c22a57",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.154.160.201:37308/bin.sh",
      "pattern": "[url:value = 'http://219.154.160.201:37308/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:13:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861827/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75546d8c-9fcf-5d43-946e-1e32b03f750c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gabuys.perspolisbet90.com/9f6b4922-b233-4e9b-b469-393373ca1fb4",
      "pattern": "[url:value = 'https://gabuys.perspolisbet90.com/9f6b4922-b233-4e9b-b469-393373ca1fb4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861826/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5554efc8-716f-5048-96bb-13caccc8ab14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.14.229:44555/i",
      "pattern": "[url:value = 'http://110.36.14.229:44555/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861825/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5740b7e4-b607-5c8a-a570-034e62173008",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.47.56:50862/bin.sh",
      "pattern": "[url:value = 'http://182.127.47.56:50862/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:11:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861824/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eab9effb-6602-5caa-b7ec-69985532c5c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vsnsopv.winsportiran.com/a18ec94a-90da-4864-8986-944d03b2b633",
      "pattern": "[url:value = 'https://vsnsopv.winsportiran.com/a18ec94a-90da-4864-8986-944d03b2b633']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T17:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861823/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1237e214-2792-5bbc-bf94-bbbc69acffa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.30.137:45703/i",
      "pattern": "[url:value = 'http://42.230.30.137:45703/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:59:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861822/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2cdf17b-5774-520a-a751-4044a40b5ede",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.60.221.145:44249/i",
      "pattern": "[url:value = 'http://115.60.221.145:44249/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861821/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5da54a5-7ac5-529a-99f9-eb1e6461fc86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.195.207:46277/bin.sh",
      "pattern": "[url:value = 'http://61.52.195.207:46277/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:51:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861820/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3e34b11-2be2-55d1-9842-23af8c3ececf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/8587665743/3hHQCyw.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/8587665743/3hHQCyw.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:51:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861819/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de45e67a-e177-559d-8a46-1a3421d0cf8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/ldr.exe",
      "pattern": "[url:value = 'http://196.251.107.104/ldr.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:40:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861818/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea44c400-57f1-5011-b582-3ccf9eff33f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.35.224:40827/i",
      "pattern": "[url:value = 'http://182.114.35.224:40827/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:38:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861817/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a29fd1b2-cbaa-5dd8-83d2-ff918382eb64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.14.229:44555/bin.sh",
      "pattern": "[url:value = 'http://110.36.14.229:44555/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:36:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861816/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cbed7e3-a5dc-58dc-8418-a5e11c1ffbc8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.252:43428/bin.sh",
      "pattern": "[url:value = 'http://46.236.65.252:43428/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:29:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861815/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c23af281-5586-5e1d-876a-1bdf24b0eede",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://prmozcj.persian.sex/c4fc525c-861c-4b5a-a377-7516bfebdc59",
      "pattern": "[url:value = 'https://prmozcj.persian.sex/c4fc525c-861c-4b5a-a377-7516bfebdc59']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861814/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae321456-9c3d-5c4f-b587-dc6674c0d05c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.233.102.185:17632/bin.sh",
      "pattern": "[url:value = 'http://94.233.102.185:17632/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:24:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861813/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d9989a4-652a-5a2b-bed2-5e5d167e302d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.35.224:40827/bin.sh",
      "pattern": "[url:value = 'http://182.114.35.224:40827/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:23:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861812/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31130acf-38c6-579e-8784-7ce3ce9b146d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.246.216:46742/i",
      "pattern": "[url:value = 'http://42.234.246.216:46742/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:18:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861811/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--744c4dac-1bfb-55df-9f3a-4f05a471626f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.93.90:54922/bin.sh",
      "pattern": "[url:value = 'http://115.59.93.90:54922/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861810/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcbaea30-5882-52a4-8285-60d4e7e4b0ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ckejpbj.one1xbet.net/7a4c952b-ee26-4678-98fe-c5b9b2ad153c",
      "pattern": "[url:value = 'https://ckejpbj.one1xbet.net/7a4c952b-ee26-4678-98fe-c5b9b2ad153c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T16:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861809/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6994a238-7bb3-5c33-82bd-1affad9e4532",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.30.137:45703/bin.sh",
      "pattern": "[url:value = 'http://42.230.30.137:45703/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861808/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--671337d2-741a-582d-a59a-dfec4efb53bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.246.216:46742/bin.sh",
      "pattern": "[url:value = 'http://42.234.246.216:46742/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:55:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861807/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cba60d45-15e2-5208-bd06-e0d1b1828d99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://122.231.120.121:37639/i",
      "pattern": "[url:value = 'http://122.231.120.121:37639/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:53:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861806/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f41da55d-645b-59b4-9f7d-dd4e64fffcb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ysqxkgi.mangobetfarsi.com/cf40f3eb-4043-4f99-877b-1dafe1e51c7a",
      "pattern": "[url:value = 'https://ysqxkgi.mangobetfarsi.com/cf40f3eb-4043-4f99-877b-1dafe1e51c7a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:47:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861805/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc3e0918-ce2b-59cd-a25a-4fd2933b2c87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://116.138.107.119:34359/i",
      "pattern": "[url:value = 'http://116.138.107.119:34359/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:37:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861804/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4dd2160-6228-5ef7-a03d-9ebe5823b92a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.195.127:53594/i",
      "pattern": "[url:value = 'http://182.114.195.127:53594/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861803/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93a4faa4-be1a-578f-8f40-bb910ee888a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jegtdzjo.parsbet90.com/?ublib=369dc9fd-645e-42d5-902f-6bdc2f3a4be2",
      "pattern": "[url:value = 'https://jegtdzjo.parsbet90.com/?ublib=369dc9fd-645e-42d5-902f-6bdc2f3a4be2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:31:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861802/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0de10446-df64-51b1-9657-1a3f1a134f9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://122.231.120.121:37639/bin.sh",
      "pattern": "[url:value = 'http://122.231.120.121:37639/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:28:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861801/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d146f5f2-4a1c-52f6-8c21-4fdc83f7fa18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://116.138.107.119:34359/bin.sh",
      "pattern": "[url:value = 'http://116.138.107.119:34359/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:21:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861800/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4763a483-1e16-5698-bcbb-c7c4ae3410f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.148.159.67:52087/bin.sh",
      "pattern": "[url:value = 'http://175.148.159.67:52087/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:15:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861799/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7c0f0ea-7772-5d21-b6ed-ba0f930e1518",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.43.223:43395/i",
      "pattern": "[url:value = 'http://61.52.43.223:43395/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:12:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861798/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c8fbd71-1722-5129-b5f3-7a759da552ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://disxya.jamjahani.football/30743d71-2368-4d04-b271-c8075873675c",
      "pattern": "[url:value = 'https://disxya.jamjahani.football/30743d71-2368-4d04-b271-c8075873675c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:12:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861797/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4888230-465a-584e-97d3-df4d105d54e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://izmxgmj.pasoor11.bet/77ada079-00cf-42e6-826c-3da48cdcbe3d",
      "pattern": "[url:value = 'https://izmxgmj.pasoor11.bet/77ada079-00cf-42e6-826c-3da48cdcbe3d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:05:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861796/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--650e9c61-7dfb-5c04-ab7f-b011bcab82e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.16.164.117:53377/i",
      "pattern": "[url:value = 'http://218.16.164.117:53377/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:03:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861795/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9b4ebd9-a4a6-542c-80ab-e83579337b22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://oxtumf.jamjahani.football/e110cf6c-7c0e-446f-91df-e70389bc52e8",
      "pattern": "[url:value = 'https://oxtumf.jamjahani.football/e110cf6c-7c0e-446f-91df-e70389bc52e8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T15:00:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861794/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d42298-45cc-5f8c-a726-36bd9d94cf45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/000111333.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/000111333.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:58:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861793/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba9f6a0f-6345-59b6-b227-687a2f2898b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://i.postimg.cc/k5L5rvPX/admin.png",
      "pattern": "[url:value = 'https://i.postimg.cc/k5L5rvPX/admin.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:57:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861792/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08d7268e-b70f-57e7-9b97-af1381173a40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uktbpnp.sabaad724.bet/a0596716-da22-4555-ab1d-928dfaa04c68",
      "pattern": "[url:value = 'https://uktbpnp.sabaad724.bet/a0596716-da22-4555-ab1d-928dfaa04c68']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861791/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4b6d851-5890-5f38-a119-bde1fca8be59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.118.12:36234/bin.sh",
      "pattern": "[url:value = 'http://42.234.118.12:36234/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861790/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96f8d492-f69d-5bb0-a2e0-f8c0da940ec4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.122.225.50:44158/i",
      "pattern": "[url:value = 'http://182.122.225.50:44158/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:53:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861789/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdd1963f-787e-57a9-8812-e86c1ac816f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://111.126.223.40:58633/i",
      "pattern": "[url:value = 'http://111.126.223.40:58633/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:52:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861788/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa04caa9-0b38-53ed-852c-29d66677dc01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/mpsl",
      "pattern": "[url:value = 'http://217.60.195.70/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861787/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1766279-c1dc-5b2b-8a48-9687288b40a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/arm4",
      "pattern": "[url:value = 'http://217.60.195.70/arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861780/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f6e979a-e8f8-5ea3-a238-860127312be9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm7",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861781/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--451736f8-37d2-5fb5-ab66-c162d3a543b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/mips",
      "pattern": "[url:value = 'http://217.60.195.70/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861782/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf5a5e72-399f-5798-947f-8074cc4b8217",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/x86",
      "pattern": "[url:value = 'http://217.60.195.70/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861783/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eb74563-c97f-5280-bf27-cddc77f52c82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/ppc",
      "pattern": "[url:value = 'http://217.60.195.70/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861784/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--600fd2af-dc51-57e0-acc9-cc6b9f1118b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/i686",
      "pattern": "[url:value = 'http://217.60.195.70/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861785/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ed15e68-e675-5bb4-91a4-85f5952ca0f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/m68k",
      "pattern": "[url:value = 'http://217.60.195.70/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861786/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16822847-6642-57a2-8b3c-06f1828bbfd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/spc",
      "pattern": "[url:value = 'http://217.60.195.70/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861774/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37f8f2f7-3dd0-5024-ad72-5cd56dc2cbd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/arc",
      "pattern": "[url:value = 'http://217.60.195.70/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861775/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a0e443d-da1d-5df2-b587-75c73cdd4578",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/arm6",
      "pattern": "[url:value = 'http://217.60.195.70/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861776/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa347cbb-9ae1-5bd7-af0c-5ebb0c15b5ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/arm5",
      "pattern": "[url:value = 'http://217.60.195.70/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861777/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e9d27e1-8196-5bc8-8001-c8df96c46127",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm6",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861778/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fae1c468-18d5-528d-bcd0-426bc42c83d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.mips",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861779/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--929d254e-6be2-5e94-a31b-6194b53e53a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.mipsel",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861772/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2deb58dd-0805-5ba2-a355-3eec64615209",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/sh4",
      "pattern": "[url:value = 'http://217.60.195.70/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:51:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861773/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4ae6597-3c9d-5d06-90e0-e46fc1964a1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.m68k",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861771/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19202a5f-f644-5be8-8341-11a907509e1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.sh4",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861764/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64716572-5fd0-54f5-b8a1-6c9f575ca1ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861765/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53315a2a-c489-5be8-8fca-8e908890ceb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.spc",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861766/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc1a9c9e-3808-54da-8352-8b3325a4df88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.ppc",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861767/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9260f5a9-4d7d-5a5f-9ffc-c17056fa2c17",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.x86_64",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861768/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dcf610e-176f-5b47-a01d-7efbfe7e4993",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm5",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861769/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99aa1f7c-1ce9-52ff-910b-eabb56b509ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cloudflare/Sassy.Cloudflare.cat.sh",
      "pattern": "[url:value = 'http://176.65.139.126/cloudflare/Sassy.Cloudflare.cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861770/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2683c868-7fe7-5c94-b42c-af9571845536",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uckrcup.romabet90.bet/18ca20e3-4229-4aa8-beb0-c3caf066a755",
      "pattern": "[url:value = 'https://uckrcup.romabet90.bet/18ca20e3-4229-4aa8-beb0-c3caf066a755']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861763/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1f9bdee-82e5-57f6-8a62-582335dce968",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.195.127:53594/bin.sh",
      "pattern": "[url:value = 'http://182.114.195.127:53594/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:47:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861762/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6ee76dd-8bb1-5608-a89e-f584e0295ca5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.92.64:33892/i",
      "pattern": "[url:value = 'http://123.8.92.64:33892/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:38:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861761/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4bc7e06-83dd-5561-8eb3-de1a5d163f7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://brbyxsj.riverpoker1.com/20c6da9d-651a-45d7-ad10-ad0f433143a3",
      "pattern": "[url:value = 'https://brbyxsj.riverpoker1.com/20c6da9d-651a-45d7-ad10-ad0f433143a3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861760/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ea3fd0f-2730-56ed-b7b8-68a73981011a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.16.164.117:53377/bin.sh",
      "pattern": "[url:value = 'http://218.16.164.117:53377/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:35:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861759/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71c29f44-9480-5ad4-b1cf-8aa3e27368ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qenkzpp.rika90.bet/b74de582-d317-4490-91fb-44d429df55e9",
      "pattern": "[url:value = 'https://qenkzpp.rika90.bet/b74de582-d317-4490-91fb-44d429df55e9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:33:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861758/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85c07721-0b84-5b9e-8f55-5464ed2c5aa9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://111.126.223.40:58633/bin.sh",
      "pattern": "[url:value = 'http://111.126.223.40:58633/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:31:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861757/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c9eb38a-901e-51d8-a196-002c9587476b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.58.210.127:38727/bin.sh",
      "pattern": "[url:value = 'http://42.58.210.127:38727/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:16:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861756/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--697433e9-353a-5e6c-b7fd-92ed82fcd409",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.118.246.131:46434/i",
      "pattern": "[url:value = 'http://119.118.246.131:46434/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:16:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861755/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--976f5e23-9355-5264-8574-613b79109998",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.190.224.156:54699/bin.sh",
      "pattern": "[url:value = 'http://123.190.224.156:54699/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:14:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861754/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc192f80-76d1-5878-8f1a-07405f9f595d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.101.49:42736/i",
      "pattern": "[url:value = 'http://42.232.101.49:42736/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:08:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861753/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c95231c-45cf-57fd-9dc0-8ef1b6a7e4cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.48.221:35252/i",
      "pattern": "[url:value = 'http://182.117.48.221:35252/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T14:04:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861752/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f62713e8-17eb-5129-b81d-2f6e586070c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ylcfeow.penalty.casino/0304bf64-bb0e-4049-bc13-b0f75076c3ec",
      "pattern": "[url:value = 'https://ylcfeow.penalty.casino/0304bf64-bb0e-4049-bc13-b0f75076c3ec']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:55:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861751/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61411bbd-1ad4-5631-9533-e37fd548052b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.60.221.145:44249/bin.sh",
      "pattern": "[url:value = 'http://115.60.221.145:44249/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:47:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861750/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac658f9f-32f6-51db-95f9-15383c05d251",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.48.221:35252/bin.sh",
      "pattern": "[url:value = 'http://182.117.48.221:35252/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:44:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861749/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9655959-e82f-5c96-8b6a-f7e5d6421d64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://coraline-cheats.pw/coraline_4.7.zip",
      "pattern": "[url:value = 'https://coraline-cheats.pw/coraline_4.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861748/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbbd28bb-045b-571a-adbb-3359de366396",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://gadomamada.com/MSI_220302.png",
      "pattern": "[url:value = 'http://gadomamada.com/MSI_220302.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861746/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--698013b8-2e3b-5606-b40a-a9935056a3c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://magina.online/MSI_122530.png",
      "pattern": "[url:value = 'https://magina.online/MSI_122530.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861747/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12ec69af-926c-5f56-850a-81aedc461b8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://estirarsobrelivro.com/MSI_101603.png",
      "pattern": "[url:value = 'https://estirarsobrelivro.com/MSI_101603.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861745/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62f2f30a-1b61-5ead-8f9a-ad6ebc7afe59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://magina.online/MSI_111454.png",
      "pattern": "[url:value = 'http://magina.online/MSI_111454.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861741/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f363327-1af3-507e-9b68-86900daa082a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://chinabowl.club/api/index.php?a=dl&token=8caaf953d89478b8a7191eb32295c117a310b53ac9059d4ad69a1e397ec3b2d4&rv=2c2a57da1627f1222495400c5625c3bd&src=anascopr.net&mode=cloudflare",
      "pattern": "[url:value = 'https://chinabowl.club/api/index.php?a=dl&token=8caaf953d89478b8a7191eb32295c117a310b53ac9059d4ad69a1e397ec3b2d4&rv=2c2a57da1627f1222495400c5625c3bd&src=anascopr.net&mode=cloudflare']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861742/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56a301dc-0205-56b5-bce8-a64550378348",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://grandvegasbet.com.br/MSI_114115.png",
      "pattern": "[url:value = 'https://grandvegasbet.com.br/MSI_114115.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861743/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3cd2f9e-d5a6-55ff-a268-9d42818b3ffd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://voltrix.tv/Beta/Voltrix.zip",
      "pattern": "[url:value = 'https://voltrix.tv/Beta/Voltrix.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861744/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b025808-924e-5436-b60f-599ba04ed2ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://magina.online/MSI_091731.png",
      "pattern": "[url:value = 'http://magina.online/MSI_091731.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:03Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861739/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07c26182-75d0-5063-8c83-2d75265d6157",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://gadomamada.com/MSI_111308.png",
      "pattern": "[url:value = 'http://gadomamada.com/MSI_111308.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:39:03Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861740/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d1a1d5d-224d-5e8b-891f-fbdcbcabb0ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.224.180.191:56657/i",
      "pattern": "[url:value = 'http://113.224.180.191:56657/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:37:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861738/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--762583b5-29c9-5298-9079-a2509892fbe4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://09ddpfx9.parspoker.casino/?ublib=3e69f766-07e6-4e99-ae17-d092feccd26d",
      "pattern": "[url:value = 'https://09ddpfx9.parspoker.casino/?ublib=3e69f766-07e6-4e99-ae17-d092feccd26d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861737/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--305959b8-b291-59fc-a62f-ab4bdf3e0567",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mjtcvp.jamjahani.cash/bf05d5da-a63a-403a-a9eb-9e332551fbef",
      "pattern": "[url:value = 'https://mjtcvp.jamjahani.cash/bf05d5da-a63a-403a-a9eb-9e332551fbef']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:25:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861736/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e16ed94-029c-5870-8cdc-cb1f9f28e609",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tfqpaye.one1x.bet/d361d500-0d6f-47f6-8fc6-081c7b4eb9fc",
      "pattern": "[url:value = 'https://tfqpaye.one1x.bet/d361d500-0d6f-47f6-8fc6-081c7b4eb9fc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:20:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861735/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c582bac-8b9c-5429-88da-02bbe24450c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://a98nkya7.onexprobet.com/?ublib=8863f8f5-8265-4cc4-8da6-61e4f4ff6ad3",
      "pattern": "[url:value = 'https://a98nkya7.onexprobet.com/?ublib=8863f8f5-8265-4cc4-8da6-61e4f4ff6ad3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:17:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861734/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30908877-8ab6-5e00-9a97-404e69eb1146",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70:8080/x86",
      "pattern": "[url:value = 'http://217.60.195.70:8080/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:15:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861733/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56399e0c-6a25-5d31-ab4d-81f477f22392",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zonpvb.perfectgame.casino/3c85f197-1386-4776-8c30-d77e2ab4bd25",
      "pattern": "[url:value = 'https://zonpvb.perfectgame.casino/3c85f197-1386-4776-8c30-d77e2ab4bd25']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:15:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861732/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f6da9a9-0e9c-5f13-9fa7-35aed3c84b03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xtrqgv.perspolisbet90.com/4269e1ce-4f6e-4c59-9888-09a8096244a0",
      "pattern": "[url:value = 'https://xtrqgv.perspolisbet90.com/4269e1ce-4f6e-4c59-9888-09a8096244a0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:08:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861731/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b3d23e9-5a0f-5ade-a691-69928d23727c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.238.169.120:55831/bin.sh",
      "pattern": "[url:value = 'http://42.238.169.120:55831/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861730/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc500f52-00dc-5454-9d8b-87141c5eac38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.221.182:34421/i",
      "pattern": "[url:value = 'http://110.38.221.182:34421/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T13:02:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861729/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0e211b6-b907-5f3c-8702-59a670963ba6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.179.112.253:60468/i",
      "pattern": "[url:value = 'http://42.179.112.253:60468/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:57:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861728/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42a45c64-21f3-5ffc-8b99-b07323cc54cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.50.192:52226/i",
      "pattern": "[url:value = 'http://110.37.50.192:52226/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:56:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861727/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63ec9195-71a9-5ba7-88e7-790ad205fc18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.154.160.201:37308/i",
      "pattern": "[url:value = 'http://219.154.160.201:37308/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861726/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ef4b86f-8cba-511e-b46a-b202ec57a16a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.74.34:46527/i",
      "pattern": "[url:value = 'http://42.224.74.34:46527/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861725/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1eba2ff-39eb-5987-8b81-ce046ec45b26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.134.148:51148/i",
      "pattern": "[url:value = 'http://42.230.134.148:51148/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:48:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861724/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cda6c1c0-2793-5f15-bc9c-a739f0f5ccbc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.51.103.149:39583/i",
      "pattern": "[url:value = 'http://115.51.103.149:39583/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:44:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861723/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab5108c3-255f-5f0a-b14d-b3083720d390",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.245.195:60380/i",
      "pattern": "[url:value = 'http://42.227.245.195:60380/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:35:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861722/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70b84064-ed08-5553-be3d-aa10cba486d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.142.209.46/a3f8d2/kaizen.arm7",
      "pattern": "[url:value = 'http://83.142.209.46/a3f8d2/kaizen.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861721/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efd9ad1e-e2cf-5be3-9dbe-ad667e0224dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.50.192:52226/bin.sh",
      "pattern": "[url:value = 'http://110.37.50.192:52226/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861720/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d556232e-0d73-5858-bd9f-ebf62c08de9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sedxjax.winxbet.co/6b86327e-364f-4ae0-9c01-8b73e9e7462f",
      "pattern": "[url:value = 'https://sedxjax.winxbet.co/6b86327e-364f-4ae0-9c01-8b73e9e7462f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861719/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--144a1f94-0f14-5dc2-b895-fecce1b3fba5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.179.112.253:60468/bin.sh",
      "pattern": "[url:value = 'http://42.179.112.253:60468/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:19:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861718/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffe86a3e-6b63-5d5d-89af-090b1bb7a538",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.51.103.149:39583/bin.sh",
      "pattern": "[url:value = 'http://115.51.103.149:39583/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:18:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861717/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--952c06ea-fbd9-5595-b16b-c847118983af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.245.195:60380/bin.sh",
      "pattern": "[url:value = 'http://42.227.245.195:60380/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T12:03:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861716/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbc94389-3b42-5704-adba-a6a2f64740d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.157.8:54211/i",
      "pattern": "[url:value = 'http://115.58.157.8:54211/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:59:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861715/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8170c515-208e-5aae-ad3a-1ffc64af9285",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.116.23:46485/i",
      "pattern": "[url:value = 'http://222.138.116.23:46485/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861714/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69c8cada-d6ed-52c0-ae2e-6d1b41cff932",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://blkfazi.xenicalby6.com/b3fe7804-3515-4863-845e-23f26b42e01e",
      "pattern": "[url:value = 'https://blkfazi.xenicalby6.com/b3fe7804-3515-4863-845e-23f26b42e01e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:53:03Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861713/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8742dc47-a69d-5e8a-874b-5b3c49e781a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.190.134.254:53615/i",
      "pattern": "[url:value = 'http://117.190.134.254:53615/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861712/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6372a5a1-512e-58d7-9e2d-1a09a3d1f1ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.22.103.101:57795/i",
      "pattern": "[url:value = 'http://60.22.103.101:57795/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:51:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861711/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40d2fc96-50ea-5ae2-9db8-3fda769683b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.233.226:57690/i",
      "pattern": "[url:value = 'http://110.39.233.226:57690/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:45:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861710/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8f9cd41-36ab-5eb6-ae20-58ead7a389a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.249.84:38098/i",
      "pattern": "[url:value = 'http://182.126.249.84:38098/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:41:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861709/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5852d87c-79e8-55d1-8f03-1c320c4b1355",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.116.23:46485/bin.sh",
      "pattern": "[url:value = 'http://222.138.116.23:46485/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861708/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a333dbcc-d566-59cd-b4e4-d082a97582e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.195.207:46277/i",
      "pattern": "[url:value = 'http://61.52.195.207:46277/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:32:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861707/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09adb5de-b3c6-54ff-9c68-0e5f95ce668e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.132.166.240:48522/i",
      "pattern": "[url:value = 'http://123.132.166.240:48522/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:29:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861706/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f4b6e50-80f2-5436-9755-f4c80d9ac1bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.190.105.170:37452/i",
      "pattern": "[url:value = 'http://196.190.105.170:37452/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861705/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef96c7a5-4065-5359-9817-fc8e643ef533",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.233.226:57690/bin.sh",
      "pattern": "[url:value = 'http://110.39.233.226:57690/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861704/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e630e724-0548-57c3-9a73-3d6923dde2aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://w18yfaze.yekbetiran.com/?ublib=d8bb903c-9c39-49f5-8442-c3bfb19425dd",
      "pattern": "[url:value = 'https://w18yfaze.yekbetiran.com/?ublib=d8bb903c-9c39-49f5-8442-c3bfb19425dd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861703/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fba3273-5886-50a2-988f-ea35c9769238",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.13.197:57013/i",
      "pattern": "[url:value = 'http://123.11.13.197:57013/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:26:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861702/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f080aa4a-bffe-5b64-837a-14c8ec051ffc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.13.197:57013/bin.sh",
      "pattern": "[url:value = 'http://123.11.13.197:57013/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:24:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861701/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--016418ae-876d-5ef3-b367-89539bf3877a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.157.8:54211/bin.sh",
      "pattern": "[url:value = 'http://115.58.157.8:54211/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:22:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861700/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68ad0649-fea4-5ae8-9ea0-ec672df88557",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.190.134.254:53615/bin.sh",
      "pattern": "[url:value = 'http://117.190.134.254:53615/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861699/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfa3ac9e-20ee-51d7-bd52-b1130f57a942",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.154.172.53:47597/i",
      "pattern": "[url:value = 'http://219.154.172.53:47597/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:15:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861698/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b102fb90-b4c9-58d3-bfd8-9f342823ef26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zlbcjre.wrfc8.com/39c740be-8d6a-424b-8dc0-f7e2101520ec",
      "pattern": "[url:value = 'https://zlbcjre.wrfc8.com/39c740be-8d6a-424b-8dc0-f7e2101520ec']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:15:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861697/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d080d841-1fc1-5e92-844c-1973dd050d5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.221.99.101/networke.ps1",
      "pattern": "[url:value = 'http://45.221.99.101/networke.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:13:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861696/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5c74fde-75b5-572d-82ff-e00d250b0b2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://118.175.205.141:36704/bin.sh",
      "pattern": "[url:value = 'http://118.175.205.141:36704/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:11:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861695/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4a39af3-91df-5746-abf9-278252fefb57",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gfmuomz.pinbahiis.com/f8ddbcd6-75e1-4339-b3c3-e8cddeef7ed0",
      "pattern": "[url:value = 'https://gfmuomz.pinbahiis.com/f8ddbcd6-75e1-4339-b3c3-e8cddeef7ed0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861694/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4acd6d5-33bc-53da-86f3-30c9c5e523c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/7",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861688/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1352affb-6682-5699-b34c-043dbbaba405",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/4",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861689/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b64e8eb-4f1c-54b9-9c3d-b17b08bb2e8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/6",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861690/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--256423fd-2d70-5c2e-be8c-6261909d11a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/1",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861691/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a044a229-7168-5690-aef2-84dfa85bafb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/5",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861692/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a420b60-5028-5e57-ab4c-a7d4821d132e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/3",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861693/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db82eac5-0686-5156-b5de-85cee90bd350",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/8",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:09:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861687/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01f6a246-9961-534a-9ec2-90df9600d2b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jbwjdp.rial.bet/2624e321-771c-4fb3-bcc8-cfcd27b89afc",
      "pattern": "[url:value = 'https://jbwjdp.rial.bet/2624e321-771c-4fb3-bcc8-cfcd27b89afc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:07:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861686/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0145dce-5950-5754-a25e-a291aa963e3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.13.251.233:38405/i",
      "pattern": "[url:value = 'http://221.13.251.233:38405/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T11:06:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861685/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f14dd0c-7ed6-5e3d-b483-15c21d2f083a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.22.103.101:57795/bin.sh",
      "pattern": "[url:value = 'http://60.22.103.101:57795/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:53:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861684/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3e12ce4-39fc-5273-9e34-31498aa014e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.132.166.240:48522/bin.sh",
      "pattern": "[url:value = 'http://123.132.166.240:48522/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861683/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76e33ab1-7109-5cf0-b4f8-5f1604b5e023",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.154.172.53:47597/bin.sh",
      "pattern": "[url:value = 'http://219.154.172.53:47597/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:50:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861682/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7552251-ae96-55a0-aebf-3a998cb2e2c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.13.251.233:38405/bin.sh",
      "pattern": "[url:value = 'http://221.13.251.233:38405/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:49:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861681/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0943e7b4-0678-5364-934a-2b3bb8409344",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.99.180.148:37885/i",
      "pattern": "[url:value = 'http://203.99.180.148:37885/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:47:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861680/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94aaa8ad-6b55-5555-b6a3-50f9374a322b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.58.115:37144/i",
      "pattern": "[url:value = 'http://125.44.58.115:37144/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:47:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861679/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--925840e4-ec87-5c57-9606-3888431b6b57",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://23.146.240.206/bin/support.client.exe",
      "pattern": "[url:value = 'https://23.146.240.206/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861678/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47711fa5-87ad-5895-819f-1e7ef863c424",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.249.216.4:40353/i",
      "pattern": "[url:value = 'http://112.249.216.4:40353/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:43:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861677/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb26144a-ee94-58f7-a204-ca2f28463301",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.139.62.122:46231/i",
      "pattern": "[url:value = 'http://219.139.62.122:46231/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:39:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861676/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d5195a5-8489-5204-b909-9bc24aeb69ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.234.56:37612/bin.sh",
      "pattern": "[url:value = 'http://123.12.234.56:37612/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:37:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861675/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9180877a-9fb5-5c7f-b3f9-1ea836156c5e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.121.47:46479/bin.sh",
      "pattern": "[url:value = 'http://27.215.121.47:46479/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861674/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68599fb3-cc1b-52dc-8179-858d957ad79f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.219.1.198:48121/i",
      "pattern": "[url:value = 'http://83.219.1.198:48121/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:32:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861673/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fea6a120-4ae8-52ce-9330-33bb9eff0dc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://salppir.red90.casino/47c8a229-b46a-43b7-8ac4-9173a4ac9d5d",
      "pattern": "[url:value = 'https://salppir.red90.casino/47c8a229-b46a-43b7-8ac4-9173a4ac9d5d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:31:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861672/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--009df1c8-4863-52a1-84e2-9018ea8cf487",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.206.245:32843/i",
      "pattern": "[url:value = 'http://182.113.206.245:32843/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861671/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bb8c76a-5873-53de-882a-e3ccc2e9b2eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.33.86:52707/i",
      "pattern": "[url:value = 'http://182.119.33.86:52707/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:23:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861669/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a70c699e-7974-559e-aff5-10ea8db48f84",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://202.107.96.28:50487/bin.sh",
      "pattern": "[url:value = 'http://202.107.96.28:50487/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:23:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861670/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f118b04d-3b12-58ff-b8c4-6e7aea53190e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ipfs.io/ipfs/QmbPifgvVgU4RSccJkUnzWTmDxZEoS2scDEQquqzg6GUat",
      "pattern": "[url:value = 'https://ipfs.io/ipfs/QmbPifgvVgU4RSccJkUnzWTmDxZEoS2scDEQquqzg6GUat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:18:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861668/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dd9f644-0a76-5554-9f43-a1ca14c172a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.255.227:53033/i",
      "pattern": "[url:value = 'http://110.39.255.227:53033/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:17:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861667/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6502642-de10-5257-93af-11097c57f41d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.90.102:46075/bin.sh",
      "pattern": "[url:value = 'http://42.231.90.102:46075/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861666/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bed70db-d593-5346-acf4-8dbc68a33651",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.139.62.122:46231/bin.sh",
      "pattern": "[url:value = 'http://219.139.62.122:46231/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:12:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861665/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e8731dc-d058-5de7-83df-9b93eac723b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.99.180.148:37885/bin.sh",
      "pattern": "[url:value = 'http://203.99.180.148:37885/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T10:06:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861664/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e648cf14-339a-509b-ba34-ea6f6e19c20e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.255.227:53033/bin.sh",
      "pattern": "[url:value = 'http://110.39.255.227:53033/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861663/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a1c3a34-107d-5118-9a30-9190535d8dd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.122.238.19:56927/i",
      "pattern": "[url:value = 'http://182.122.238.19:56927/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861662/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f293ffa-89e2-5e93-8f5a-c3430c85a29b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://whyldsf.rc395.com/83c2ad72-0a43-40fd-a729-6c9afe24cf65",
      "pattern": "[url:value = 'https://whyldsf.rc395.com/83c2ad72-0a43-40fd-a729-6c9afe24cf65']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:52:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861661/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6713858c-7560-54da-9b0f-df88d90b65b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.33.86:52707/bin.sh",
      "pattern": "[url:value = 'http://182.119.33.86:52707/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861660/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8a0a758-6b73-514e-a9ec-66e7e87eefad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.122.238.19:56927/bin.sh",
      "pattern": "[url:value = 'http://182.122.238.19:56927/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:44:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861659/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f251bea-21b9-5671-b0e5-ac3c9632a7c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.243.86:56320/i",
      "pattern": "[url:value = 'http://125.44.243.86:56320/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:41:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861658/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c90ad5b4-dec1-582f-8bfd-3044468c7d06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.114.178.6:37193/bin.sh",
      "pattern": "[url:value = 'http://82.114.178.6:37193/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:34:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861657/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c695bd1c-8de3-5efc-980a-a24dc18ba592",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://e3giv37r.pokerpars.poker/?ublib=4df9d346-ce49-486b-8b7a-4c2087cd8f89",
      "pattern": "[url:value = 'https://e3giv37r.pokerpars.poker/?ublib=4df9d346-ce49-486b-8b7a-4c2087cd8f89']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861656/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f677ac0-f9d9-529d-a268-1a4c76e6c4a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-340aa1a9ccc64f6b871a4c31ff93a5a6.r2.dev/DEDEwidth1234.png",
      "pattern": "[url:value = 'https://pub-340aa1a9ccc64f6b871a4c31ff93a5a6.r2.dev/DEDEwidth1234.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861655/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6aa64932-9d47-570e-8f4b-bb51d57581a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/HnDvE/",
      "pattern": "[url:value = 'http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/HnDvE/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861653/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2a72151-6b9d-5213-87b9-eb10e20bc6a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dawn-bush-ddd1.yasminanthonyy.workers.dev/dNLRP",
      "pattern": "[url:value = 'https://dawn-bush-ddd1.yasminanthonyy.workers.dev/dNLRP']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861654/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddbff3c7-4f48-50dd-a9ab-08afc9c571ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/pKTrG",
      "pattern": "[url:value = 'http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/pKTrG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861652/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66bc3ea9-8a2c-5041-8259-161b734aacb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/mcslb",
      "pattern": "[url:value = 'http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/mcslb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861650/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96e5ff6d-e87d-5040-b556-a576ba55d262",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/jsPtG",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/jsPtG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861651/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b772c829-0024-54a5-ba55-c4e9bf33d665",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/xiykS",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/xiykS']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861649/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cec198c-0343-52d2-ba80-e724683ffed9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.70.165/22/img_102554.png",
      "pattern": "[url:value = 'http://104.168.70.165/22/img_102554.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861648/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--776386a1-d046-539e-b694-f34880119d0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.77.57.234/180/img_185101.png",
      "pattern": "[url:value = 'http://31.77.57.234/180/img_185101.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861646/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3d0ce11-8ebc-5e06-81ad-0c07d4c253b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/fWdrA",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/fWdrA']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861647/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a416ffb-e2df-5a86-acf1-42b33c0a75d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://getabre.com/NDYNuw",
      "pattern": "[url:value = 'https://getabre.com/NDYNuw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861644/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--323d3e6b-622a-54b9-8c13-73fbc9fdf6b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-e2490b2d81b147ac978f21eab73fe8c4.r2.dev/lasaas.png",
      "pattern": "[url:value = 'https://pub-e2490b2d81b147ac978f21eab73fe8c4.r2.dev/lasaas.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861645/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bc46d33-e674-5e79-97c6-4c83b8c4c090",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.70.165/22/wedidbestthingswithbetterplaceformygirl.hta",
      "pattern": "[url:value = 'http://104.168.70.165/22/wedidbestthingswithbetterplaceformygirl.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861642/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebccaf0b-5a84-571f-ab7c-9a3819986b6d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://getabre.com/wDUtLv",
      "pattern": "[url:value = 'https://getabre.com/wDUtLv']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861643/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41fd734f-de58-5064-b2b3-bbbc7ce53bb5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.77.57.234/180/wegivenbestthingsforbetterplaceforme.hta",
      "pattern": "[url:value = 'http://31.77.57.234/180/wegivenbestthingsforbetterplaceforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861640/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--961fe58e-ee30-5c5f-97b9-18aeeb773503",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.77.57.234/httpswww.pcmag.compicksthe-best-cloud-storage-and-file-sharing-servicestest_uuid=05ZUPUtSJIjL9ET37tWfQcl&test_variant=APP.php",
      "pattern": "[url:value = 'http://31.77.57.234/httpswww.pcmag.compicksthe-best-cloud-storage-and-file-sharing-servicestest_uuid=05ZUPUtSJIjL9ET37tWfQcl&test_variant=APP.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861641/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b2da8ea-710e-5718-b8c2-6a4ddb552ac8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/sqxOi",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/sqxOi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861639/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b69a649-ad46-584c-a679-59db39e4034b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://2026rupolice.vercel.app/?download=1",
      "pattern": "[url:value = 'https://2026rupolice.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861638/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b58385d1-c21e-5427-af29-6252d7831c71",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://news24-ebon.vercel.app/?download=1",
      "pattern": "[url:value = 'https://news24-ebon.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861636/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74671678-0ba2-5b75-9ca8-691d38d2c83b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-ad9c25de14a347bf8934835d655aafc1.r2.dev/FILAI.png",
      "pattern": "[url:value = 'https://pub-ad9c25de14a347bf8934835d655aafc1.r2.dev/FILAI.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861637/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--721dd008-2bb4-558d-a301-fc500882417f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/WrkWF",
      "pattern": "[url:value = 'http://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/WrkWF']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861635/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31f27141-68bb-580a-8fab-0bfaec611471",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://spiskisvo.xyz/%D0%90%D0%9A%D0%A2%D0%A3%D0%90%D0%9B%D0%AC%D0%9D%D0%AB%D0%99_%D0%A1%D0%9F%D0%98%D0%A1%D0%9E%D0%9A.apk",
      "pattern": "[url:value = 'https://spiskisvo.xyz/%D0%90%D0%9A%D0%A2%D0%A3%D0%90%D0%9B%D0%AC%D0%9D%D0%AB%D0%99_%D0%A1%D0%9F%D0%98%D0%A1%D0%9E%D0%9A.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:24:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861634/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90613688-6b88-537e-8a0b-4fa5d67aa454",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.70.165/httpswww.pcmag.compicksthe-best-cloud-storage-and-file-sharing-servicestest_uuid=05ZUPUtSJIjL9ET37tWfQcl&test_variant=EVC.php",
      "pattern": "[url:value = 'http://104.168.70.165/httpswww.pcmag.compicksthe-best-cloud-storage-and-file-sharing-servicestest_uuid=05ZUPUtSJIjL9ET37tWfQcl&test_variant=EVC.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:24:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861633/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38bf099c-6faa-504f-bb72-9aa2eac4bd99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/favour4.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/favour4.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:22:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861632/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a7d8a0d-7603-50e0-be1c-f4992a5a1751",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/Doppee7.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/Doppee7.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:22:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861631/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4234b273-5936-574f-a4db-197a1f06de18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/Freda4.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/Freda4.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861630/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f154e9e-e74d-574d-b265-39e61fe86eac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.71.137:60755/bin.sh",
      "pattern": "[url:value = 'http://182.119.71.137:60755/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:22:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861629/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5d1bb14-18da-542d-8c7e-4ba7ec65e54d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.236.151.79:53902/i",
      "pattern": "[url:value = 'http://113.236.151.79:53902/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:21:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861628/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa77680e-08f2-52d1-987f-fb978e36f19f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.120.245:48879/i",
      "pattern": "[url:value = 'http://115.49.120.245:48879/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:20:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861627/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cf158d2-b37a-5ef0-900c-8e655ee2eb6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xwwitjs.rayonbet.com/5e565f30-6b82-4f4b-94d0-1d30c4d9b952",
      "pattern": "[url:value = 'https://xwwitjs.rayonbet.com/5e565f30-6b82-4f4b-94d0-1d30c4d9b952']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:15:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861626/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b92329e-4486-58f8-ac1e-8666b59ce49d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://demfmb.restaurantguideaarhus.com/0de789be-5fb4-489b-8d8c-ed7d86ef8f64",
      "pattern": "[url:value = 'https://demfmb.restaurantguideaarhus.com/0de789be-5fb4-489b-8d8c-ed7d86ef8f64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T09:10:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861625/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3de066e9-8662-5947-be56-f55a3edc61cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.178.239.229:51882/bin.sh",
      "pattern": "[url:value = 'http://42.178.239.229:51882/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:59:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861624/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fd3f95e-5829-5c09-81d7-92375ad44236",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.120.245:48879/bin.sh",
      "pattern": "[url:value = 'http://115.49.120.245:48879/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861623/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1442d1dd-646e-5cee-8be3-c3f95154caa9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.243.86:56320/bin.sh",
      "pattern": "[url:value = 'http://125.44.243.86:56320/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:55:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861622/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--381e09ec-f9be-57b9-8c00-6281546c90ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.140.193.116:56777/i",
      "pattern": "[url:value = 'http://222.140.193.116:56777/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861621/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1aca647e-a105-5486-ba6a-4bd1c3eeb3fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gwjjko.onlineshart.com/651872e1-b1e3-40fe-b5c5-c7ebf5606378",
      "pattern": "[url:value = 'https://gwjjko.onlineshart.com/651872e1-b1e3-40fe-b5c5-c7ebf5606378']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:55:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861620/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a930e26-646d-57fc-96b7-bd22498a016d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.39.88:60831/i",
      "pattern": "[url:value = 'http://110.37.39.88:60831/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861619/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fdbb8bf-a11d-5529-ba43-1e94ac8a8776",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.236.151.79:53902/bin.sh",
      "pattern": "[url:value = 'http://113.236.151.79:53902/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:51:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861618/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--910183e1-54f0-52e5-af61-4c0f95c691ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.55.30:60914/i",
      "pattern": "[url:value = 'http://27.215.55.30:60914/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861617/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50eee555-30da-5f00-afb4-2149741a2446",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gyayod.pishbinisite.com/cd0aa4a3-065d-484a-98b3-9b525437ebed",
      "pattern": "[url:value = 'https://gyayod.pishbinisite.com/cd0aa4a3-065d-484a-98b3-9b525437ebed']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:45:53Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861616/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65e76ed6-a2da-5fb1-a4cd-5e77f84240b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.231.244.48:44568/bin.sh",
      "pattern": "[url:value = 'http://113.231.244.48:44568/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:41:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861615/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed9d9884-7b5a-53e4-b9aa-384b25e6ee76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.80.45:50595/i",
      "pattern": "[url:value = 'http://123.14.80.45:50595/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:41:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861614/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71b8c848-72a0-5e3e-8047-bff0a7782fa2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gdenwcw.rabonaabet.com/9eb34cf2-5092-4f61-ab95-79609a94c94e",
      "pattern": "[url:value = 'https://gdenwcw.rabonaabet.com/9eb34cf2-5092-4f61-ab95-79609a94c94e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:39:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861613/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07d2256f-055f-5f9c-a37d-5e387be55f43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.55.30:60914/bin.sh",
      "pattern": "[url:value = 'http://27.215.55.30:60914/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:32:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861612/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3011dcb-553a-5d9f-9ce7-8a1d75750b3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.140.193.116:56777/bin.sh",
      "pattern": "[url:value = 'http://222.140.193.116:56777/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:32:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861611/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0735c36e-d070-53d6-9a3f-df8b6e6c0cfa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.129.133.220:60360/i",
      "pattern": "[url:value = 'http://123.129.133.220:60360/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:28:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861610/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0a88ff1-1d0d-5b57-82ae-bbe8057689fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.39.88:60831/bin.sh",
      "pattern": "[url:value = 'http://110.37.39.88:60831/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861609/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f8fcd16-9add-5e9a-b4f4-e59d5c0fc967",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cafdfe.pishbinihoshmand.com/9247b3b2-a7dc-49f7-ba03-da92b2eb1bc5",
      "pattern": "[url:value = 'https://cafdfe.pishbinihoshmand.com/9247b3b2-a7dc-49f7-ba03-da92b2eb1bc5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:24:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861608/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c98773e7-b4f7-595c-9bea-6626d89784c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.233.162.101:58060/i",
      "pattern": "[url:value = 'http://42.233.162.101:58060/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:22:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861607/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52c7723a-ce49-57d6-8eba-afbf9e0c209f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dgxbf5rv.onexfa.com/?ublib=4f7da9a9-0aa7-43fc-8999-a76506fd56c1",
      "pattern": "[url:value = 'https://dgxbf5rv.onexfa.com/?ublib=4f7da9a9-0aa7-43fc-8999-a76506fd56c1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:17:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861606/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e59fbcd-06d4-51fc-93f3-b5fb00093e90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.129.133.220:60360/bin.sh",
      "pattern": "[url:value = 'http://123.129.133.220:60360/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:15:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861605/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--208bc071-06af-5168-931d-0c3496fad9d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lplhoo.pishbinigame.com/72544e76-576d-4a90-947d-a5351c4655ad",
      "pattern": "[url:value = 'https://lplhoo.pishbinigame.com/72544e76-576d-4a90-947d-a5351c4655ad']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:15:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861604/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24962d62-7d62-536d-a7af-e1e3ef407754",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.80.45:50595/bin.sh",
      "pattern": "[url:value = 'http://123.14.80.45:50595/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:14:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861603/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ebd0775-8ece-588b-840e-2800ac37fde9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mbigpi.pishbinifoori.com/883fbe81-134a-49e9-8a0d-e4788ebb3b50",
      "pattern": "[url:value = 'https://mbigpi.pishbinifoori.com/883fbe81-134a-49e9-8a0d-e4788ebb3b50']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:10:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861602/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--587868d1-378b-5917-8ced-2f3732980c8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.47.190.136:59454/bin.sh",
      "pattern": "[url:value = 'http://59.47.190.136:59454/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:09:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861601/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92acf68f-4c3c-5bb8-aa09-51aa61d011a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.247.164:54717/i",
      "pattern": "[url:value = 'http://110.39.247.164:54717/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:07:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861600/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ed9ced7-6091-5dd3-aa2f-1d5eaac7c79c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.173.199.143:44077/i",
      "pattern": "[url:value = 'http://31.173.199.143:44077/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T08:00:48Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861599/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80c0acca-c4cb-5f70-aa9d-3a5ad1523bf4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.115.21:54900/bin.sh",
      "pattern": "[url:value = 'http://110.37.115.21:54900/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:59:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861598/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e1ee899-900c-55b4-a51a-e48f8616f0d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.83.180:49395/bin.sh",
      "pattern": "[url:value = 'http://182.126.83.180:49395/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:58:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861597/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a9449a2-3e1d-5359-9a06-1048f95f2b27",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jgjuwx.pishbiniclass.com/2ce721b9-466e-42a7-a6bd-afa08478c385",
      "pattern": "[url:value = 'https://jgjuwx.pishbiniclass.com/2ce721b9-466e-42a7-a6bd-afa08478c385']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861596/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5516c53f-2657-57da-88b3-42311b4f89d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.249.30:59403/i",
      "pattern": "[url:value = 'http://110.39.249.30:59403/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:54:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861595/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56d3af8f-166c-577c-9fc2-76eba63e9c2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.95.19.85:44312/i",
      "pattern": "[url:value = 'http://124.95.19.85:44312/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:50:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861594/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf663f88-0825-573b-a5a5-039d7aef1c25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rcyrnur.pokerprado.bet/248ff6ad-4ec9-42ac-80af-9e754b90def2",
      "pattern": "[url:value = 'https://rcyrnur.pokerprado.bet/248ff6ad-4ec9-42ac-80af-9e754b90def2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:50:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861593/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ffef938-ef2c-5b12-b2cb-cbd456ae746b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.88.109:58208/bin.sh",
      "pattern": "[url:value = 'http://110.37.88.109:58208/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861591/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dedd0d0-5e91-50c9-a5d8-78157ec07138",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.95.19.85:44312/bin.sh",
      "pattern": "[url:value = 'http://124.95.19.85:44312/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861592/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ab0046e-1575-5bcb-88c0-6163e8699616",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.247.164:54717/bin.sh",
      "pattern": "[url:value = 'http://110.39.247.164:54717/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:39:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861590/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--beafed6e-dc2c-5ecc-84fe-a92a95ee2e18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.58.210.127:38727/i",
      "pattern": "[url:value = 'http://42.58.210.127:38727/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861589/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3db0686e-878f-59d0-bd35-808c415303f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.220.145.247:55951/i",
      "pattern": "[url:value = 'http://222.220.145.247:55951/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:30:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861588/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35ef2c25-23a3-59bf-bf5d-d676e05a0888",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.137.134.0:51648/i",
      "pattern": "[url:value = 'http://61.137.134.0:51648/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:29:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861587/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad7bb4d8-5d0f-5acd-b31d-6f1a03add86c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://r2qz0qa2.poker-online.bet/?ublib=9422b0fc-c3d6-4ede-9c00-9af152d86ef6",
      "pattern": "[url:value = 'https://r2qz0qa2.poker-online.bet/?ublib=9422b0fc-c3d6-4ede-9c00-9af152d86ef6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:27:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861586/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa7cfb40-868d-52e5-9bad-678b7981e9b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.23.113.57:36784/bin.sh",
      "pattern": "[url:value = 'http://60.23.113.57:36784/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:26:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861584/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f361c4c6-9bf3-5dbb-8187-0bac7501bf9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.69.245:52606/i",
      "pattern": "[url:value = 'http://115.57.69.245:52606/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:26:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861585/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--862ad3fe-c37e-5a2e-a085-59072b784acb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rmipclt.penality.bet/639f1d09-6a0c-44fa-ab2c-e494aec3ab9b",
      "pattern": "[url:value = 'https://rmipclt.penality.bet/639f1d09-6a0c-44fa-ab2c-e494aec3ab9b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861583/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--126b7d6a-18c5-54cb-ab66-7aacd1ae7b14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.248.117:53826/i",
      "pattern": "[url:value = 'http://110.39.248.117:53826/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T07:11:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861582/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2975a0ca-f5d6-5754-8734-6b6eb81a0229",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.121.158:58900/bin.sh",
      "pattern": "[url:value = 'http://182.127.121.158:58900/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:53:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861581/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2e26a13-a8fa-5d87-9ef5-4cad0d5225b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://165.154.199.52/tcp",
      "pattern": "[url:value = 'http://165.154.199.52/tcp']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:50:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861580/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6527f24a-62b8-57fe-bb72-f637ac90677e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://213.111.144.211:8443/bins/2",
      "pattern": "[url:value = 'https://213.111.144.211:8443/bins/2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:50:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861579/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39a6c697-f2ff-57b5-863e-1e6b7dcbe40b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.177.39.68:44446/i",
      "pattern": "[url:value = 'http://42.177.39.68:44446/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:47:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861578/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b47b6ff5-05fc-5ee7-bb1e-d169eb65d64b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.241:43031/bin.sh",
      "pattern": "[url:value = 'http://163.142.92.241:43031/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:46:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861577/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8daa955-77a8-59fc-83bc-12a2ee65030a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://111.173.159.215:55707/i",
      "pattern": "[url:value = 'http://111.173.159.215:55707/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:46:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861576/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--098363f7-5192-53b9-8bda-df35e9030f6a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://emyynld.pasur21.com/8570bba4-df3f-4581-9a6c-f4bb23099132",
      "pattern": "[url:value = 'https://emyynld.pasur21.com/8570bba4-df3f-4581-9a6c-f4bb23099132']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861575/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80b84e41-ff81-5cd8-a36e-68ef89095a72",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.137.134.0:51648/bin.sh",
      "pattern": "[url:value = 'http://61.137.134.0:51648/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:36:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861574/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6d7fb3a-8dfc-510a-968e-38c4fe9f9f52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.96.141.220:51333/i",
      "pattern": "[url:value = 'http://59.96.141.220:51333/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:35:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861573/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e1b610c-e984-5fcf-aaf3-788798e6436a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/disssh4",
      "pattern": "[url:value = 'http://151.243.109.174/disssh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:30:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861572/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ee34923-c6bc-5cee-a16a-283e3310507e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/dissx86",
      "pattern": "[url:value = 'http://151.243.109.174/dissx86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:30:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861571/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7dbb35c-a4b2-5c79-8d29-afc6776c6199",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/dissarm6",
      "pattern": "[url:value = 'http://151.243.109.174/dissarm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861568/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afb4e0aa-4f6a-51bb-9e19-a250a650c1a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/dissmips",
      "pattern": "[url:value = 'http://151.243.109.174/dissmips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861569/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e01b3df-c855-5a56-92aa-ee4c566db9d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/dissarm5",
      "pattern": "[url:value = 'http://151.243.109.174/dissarm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861570/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ada8da9-ad2d-572c-8393-a5024a56b9f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/dissarm7",
      "pattern": "[url:value = 'http://151.243.109.174/dissarm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:29:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861566/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6c3d71a-692c-5433-8b57-c877dc976be5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/dissmpsl",
      "pattern": "[url:value = 'http://151.243.109.174/dissmpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:29:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861567/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49fbdd0c-9d7b-5ae4-93d7-04955cf2a41c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.156.87.82/main_arm7",
      "pattern": "[url:value = 'http://45.156.87.82/main_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:27:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861565/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33c4be38-79c4-56ce-9a06-6081fa6e3f40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.156.87.82/main_x86",
      "pattern": "[url:value = 'http://45.156.87.82/main_x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:26:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861564/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c1feaba-7e0a-5bde-a808-ef8805fc411d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://89.40.31.72/Test.exe",
      "pattern": "[url:value = 'http://89.40.31.72/Test.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861563/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d811b4ed-a9f3-5ad4-b4cd-5f3d2f0c4a85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://172.94.9.168/ss",
      "pattern": "[url:value = 'http://172.94.9.168/ss']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:22:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861562/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebf95b5d-6bd5-5383-992b-13848eaa78e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/bins.sh",
      "pattern": "[url:value = 'http://151.243.109.174/bins.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:22:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861560/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--320df16b-be02-5890-a820-dc9b328cef17",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.243.109.174/dissarm4",
      "pattern": "[url:value = 'http://151.243.109.174/dissarm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:22:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861561/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cfdbd2c-a01c-5189-a362-4c7ea513f586",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://189.183.104.194:84//r/nSec-Fetch-Dest",
      "pattern": "[url:value = 'http://189.183.104.194:84//r/nSec-Fetch-Dest']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:21:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861559/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88063263-f308-5295-a8bf-794adf84785f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity/r/nAccept-Encoding",
      "pattern": "[url:value = 'https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity/r/nAccept-Encoding']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861557/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1dba25a-bd2b-55a0-9d22-a9e7fd2b5b6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://177.152.150.32:8084//r/n/r/n",
      "pattern": "[url:value = 'http://177.152.150.32:8084//r/n/r/n']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861558/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06adcee0-15d8-516b-9e28-6d1be9923dd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://38.60.206.224/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://38.60.206.224/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:20:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861556/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d4049c3-703d-5b70-9883-6abe45d2d69a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://104.251.181.41/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://104.251.181.41/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861554/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c16e0f0a-1f03-5544-ab4a-2d6a70f258e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://45.156.87.133/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://45.156.87.133/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861555/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04d4259d-4d24-5075-b440-ea1fd9b77530",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.187.138/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://209.99.187.138/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861551/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8511510-2b72-5d75-b7eb-50546b5e4b1c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.189.202/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://209.99.189.202/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861552/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c2a1e37-7611-56bd-ae44-31c1183e9bec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.184.196/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://209.99.184.196/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861553/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3423980-d621-5889-8b21-f7e82557d81a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://104.251.180.109/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://104.251.180.109/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861543/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0aa2e0a-042f-544c-b62a-a114af5f22fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.42.176.163/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://31.42.176.163/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861544/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb4dda50-9fbc-59bb-8c1b-7f3fe79581bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://104.251.180.112/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://104.251.180.112/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861545/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f64c954-a896-51cf-8383-6d7140ce169f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://213.111.144.43/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://213.111.144.43/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861546/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--762b63ad-c50a-5826-8583-991bb558f5f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://45.156.87.91/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://45.156.87.91/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861547/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f13ab78b-1175-50d7-8b81-150cc3155898",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.188.67/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://209.99.188.67/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861548/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed47a991-84c9-5a88-8674-0464e75fc6b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.187.162/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://209.99.187.162/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861549/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c75ef91-b94f-57bc-a23a-545c78a85ac7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://178.16.54.101/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://178.16.54.101/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861550/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc5b262c-7bd3-51ea-8b58-b8b924f4bc0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.184.196/bin/support.client.exe",
      "pattern": "[url:value = 'https://209.99.184.196/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861542/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c58a05a5-9d3a-52e9-bfee-2737020663a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://213.111.144.43/bin/support.client.exe",
      "pattern": "[url:value = 'http://213.111.144.43/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861541/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d3bf446-54da-5cbf-9d88-b341cda91a85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.187.162/bin/support.client.exe",
      "pattern": "[url:value = 'https://209.99.187.162/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861534/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97f4ff8d-ac35-5b23-8962-072e52ecb93b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.188.67/bin/support.client.exe",
      "pattern": "[url:value = 'https://209.99.188.67/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861535/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25d541bd-1d68-5e22-850c-174fe66081e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.187.138/bin/support.client.exe",
      "pattern": "[url:value = 'https://209.99.187.138/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861536/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7c039c7-0df3-5705-94a0-1eb7ffa9c79c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://178.16.54.101/bin/support.client.exe",
      "pattern": "[url:value = 'https://178.16.54.101/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861537/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bf438cd-93cb-58f4-8ef6-de6f5277f223",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://209.99.189.202/bin/support.client.exe",
      "pattern": "[url:value = 'https://209.99.189.202/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861538/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eca105a7-d676-50d6-9635-4a6c11f4d0c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.42.176.163/bin/support.client.exe",
      "pattern": "[url:value = 'http://31.42.176.163/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861539/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b576e808-7280-5a78-97c9-13dc532a313d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://104.251.181.41/bin/support.client.exe",
      "pattern": "[url:value = 'https://104.251.181.41/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861540/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56a1dacb-6b30-5bf3-a013-147abfd0dc03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://45.156.87.91/bin/support.client.exe",
      "pattern": "[url:value = 'https://45.156.87.91/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:19:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861533/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c84825c-e0a3-5bf1-b189-21e061d65a61",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.armv4l",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861532/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--809d67c6-08d0-5c9a-9b7d-163275e182c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.armv6l",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861523/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--139b91b2-a41d-51eb-98d4-57d426eb7d5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.powerpc",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861524/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7979db03-e0fc-51d8-ad01-f1cd38f62dcf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.armv5l",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861525/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09333404-f654-59b1-9e7d-e6f6220d0fe1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.x86_64",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861526/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dcfc6f3-8108-5b74-9048-70aa99a8f0b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.mipsel",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861527/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--737f85e0-1192-5368-af55-be5cfa245531",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.armv7l",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861528/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--349f47c0-9ce6-5c8f-b73c-f4de3c8b1d27",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.arc",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861529/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c42a370f-0021-503c-9ea7-21446884050d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.i486",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861530/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a52d91b-6fd1-55fd-a5aa-abead52a2cd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.sh4",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861531/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bd5e59e-58df-5abc-9bf6-2845f01abdf2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ctST",
      "pattern": "[url:value = 'http://188.132.232.81/ctST']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861522/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be5c2d1a-7672-5254-a42d-d451febe4569",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/WgL",
      "pattern": "[url:value = 'http://188.132.232.81/WgL']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861521/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4179f109-c66f-5e1b-b963-2222628fc1c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/hKE",
      "pattern": "[url:value = 'http://188.132.232.81/hKE']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861517/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6c40874-b32c-571e-adc9-dd797e98fec5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/GlV",
      "pattern": "[url:value = 'http://188.132.232.81/GlV']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861518/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06c2025d-3bf5-59b0-bc80-8bf70c23f1b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Pv7",
      "pattern": "[url:value = 'http://188.132.232.81/Pv7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861519/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57ec5979-9c47-5c85-8872-123dfea0f1d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/AA4z",
      "pattern": "[url:value = 'http://188.132.232.81/AA4z']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861520/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac9d3c98-e7b9-5de6-8b4b-80fac64b463c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Z7Jy",
      "pattern": "[url:value = 'http://188.132.232.81/Z7Jy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861516/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14b40c6c-d055-5a72-b8ad-30eaceeff1f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/xkxM",
      "pattern": "[url:value = 'http://188.132.232.81/xkxM']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861513/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd7fef23-8697-5c45-b49c-13bf640cc6b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ktzt",
      "pattern": "[url:value = 'http://188.132.232.81/ktzt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861514/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a2ec590-f8c4-5b0e-85a7-9fd04fc80717",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.mips",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861515/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb6845f9-139a-5edf-8326-cd3ef7a331f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/bwr",
      "pattern": "[url:value = 'http://188.132.232.81/bwr']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861512/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d37a5d72-5f9b-5974-aa3d-8d45082cfc52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.sparc",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861509/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63b6a9ff-e34e-5c4e-9ecd-fa452882dab8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.aarch64",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861510/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2db211b0-c990-591b-b65b-f057e1890c75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/updaterros.m68k",
      "pattern": "[url:value = 'http://83.168.110.191/updaterros.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861511/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe51e2cf-ca05-5c8c-9940-4242903746e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/jvKg",
      "pattern": "[url:value = 'http://188.132.232.81/jvKg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861503/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bc80e94-d9f2-546e-a718-5778b0401ae3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/a9Kw",
      "pattern": "[url:value = 'http://188.132.232.81/a9Kw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861504/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c563edf-6724-5807-9cc4-178f83156565",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/PAB",
      "pattern": "[url:value = 'http://188.132.232.81/PAB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861505/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc424b8c-8eaf-55ea-b599-39a0576e510f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/12.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/12.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861506/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39bc4061-b4fb-54ef-aeea-6671d9af83fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Cfxe",
      "pattern": "[url:value = 'http://188.132.232.81/Cfxe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861507/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--252465ed-8f41-5324-a0c7-da0560b702f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/DzrG",
      "pattern": "[url:value = 'http://188.132.232.81/DzrG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:17:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861508/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f133db9e-2b75-5789-ae6a-def254b3f297",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.122.171.156/fscan",
      "pattern": "[url:value = 'http://185.122.171.156/fscan']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861502/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4a97e05-7188-5248-a77d-c80c71330ba4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_arm6",
      "pattern": "[url:value = 'http://176.65.139.132/main_arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861501/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bc5d842-60d4-518a-ab00-1a93611fcf63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_arm",
      "pattern": "[url:value = 'http://176.65.139.132/main_arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861491/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dac3ba9-b9f8-5d5f-8845-03c070c75ef6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_m68k",
      "pattern": "[url:value = 'http://176.65.139.132/main_m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861492/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46d68c50-e999-51cd-a186-32752420a0b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_arm5",
      "pattern": "[url:value = 'http://176.65.139.132/main_arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861493/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2071f8cb-ba94-5a58-b45a-0dc9c275ec88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_x86",
      "pattern": "[url:value = 'http://176.65.139.132/main_x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861494/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78d1ba86-8df9-534f-9336-e14924d86340",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_sh4",
      "pattern": "[url:value = 'http://176.65.139.132/main_sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861495/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5df7e15-bffa-50e0-8f28-6aa440974025",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_arm7",
      "pattern": "[url:value = 'http://176.65.139.132/main_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861496/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--125cb9a4-e341-512b-8045-79c748d25390",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_mips",
      "pattern": "[url:value = 'http://176.65.139.132/main_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861497/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d66fabb-7c66-5f12-be80-1a44fbac75fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_x86_64",
      "pattern": "[url:value = 'http://176.65.139.132/main_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861498/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3215281-85da-5ade-adbf-2a5e49645114",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_ppc",
      "pattern": "[url:value = 'http://176.65.139.132/main_ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861499/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47eb4b3e-41fc-5bab-abf3-8a649e333d89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.132/main_mpsl",
      "pattern": "[url:value = 'http://176.65.139.132/main_mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:14:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861500/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c52812c-04ac-5615-a3be-6e31fb1f3fc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.177.39.68:44446/bin.sh",
      "pattern": "[url:value = 'http://42.177.39.68:44446/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:12:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861490/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24787929-62b1-579e-b1fe-11d245cb1f30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.142.41/bot",
      "pattern": "[url:value = 'http://176.65.142.41/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:11:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861489/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46476e4f-0ce1-5512-ac71-8bd92dbcceb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.220.145.247:55951/bin.sh",
      "pattern": "[url:value = 'http://222.220.145.247:55951/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:08:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861488/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b83bf63-7b87-5ba1-bd1f-278133ddf770",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.96.141.220:51333/bin.sh",
      "pattern": "[url:value = 'http://59.96.141.220:51333/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T06:06:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861487/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8aa9ddb-804b-5fed-a14b-7761dd40f838",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.207.201:50335/bin.sh",
      "pattern": "[url:value = 'http://123.4.207.201:50335/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:59:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861486/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77cf9a24-d961-5ab0-b30d-b95c2cc12697",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nkfjdum.pasoor11.bet/f69295ed-5a4d-48a2-8dc7-23385cdc2f36",
      "pattern": "[url:value = 'https://nkfjdum.pasoor11.bet/f69295ed-5a4d-48a2-8dc7-23385cdc2f36']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:56:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861485/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9814bccb-e20d-563b-9464-ff3015557aff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hxmhpw.pishbinibet.casino/1512a7e8-6e50-461e-8b65-d6807fd7ebbd",
      "pattern": "[url:value = 'https://hxmhpw.pishbinibet.casino/1512a7e8-6e50-461e-8b65-d6807fd7ebbd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:55:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861484/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7dfd7ca-97ed-5526-93b7-881e04443140",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sfdwdmq.mangobetfarsi.com/053d3da2-9033-4467-b64a-0aaee7f984f7",
      "pattern": "[url:value = 'https://sfdwdmq.mangobetfarsi.com/053d3da2-9033-4467-b64a-0aaee7f984f7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:54:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861483/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22911716-40bd-5c24-9ee7-29ebc6402b72",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.118.132.61/release/",
      "pattern": "[url:value = 'http://64.118.132.61/release/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:53:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861482/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3f09525-c3c8-5278-8245-5e0cfa08bb47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.242.156:60470/i",
      "pattern": "[url:value = 'http://110.39.242.156:60470/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861481/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf916df4-5e27-5eab-9976-2655e82ad454",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.15.18:36373/i",
      "pattern": "[url:value = 'http://110.36.15.18:36373/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:40:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861480/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--425a2739-82e7-560e-a1b3-a6200342080b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/ohshisss.sh",
      "pattern": "[url:value = 'http://152.236.5.7/ohshisss.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:35:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861479/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9119a6fc-9eaa-5397-abeb-9c3650836f65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.normativatecnica.org/kim/kim.bin",
      "pattern": "[url:value = 'https://www.normativatecnica.org/kim/kim.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:34:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861478/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff4bae4c-bd52-54e6-aabf-cf0e2f07ab5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ksb.com.de/ps/ps.js",
      "pattern": "[url:value = 'https://ksb.com.de/ps/ps.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:33:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861477/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--509ba724-d696-5b9a-bc4a-a0a8b0f7dc0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ali-alomaritrading.cam/ag/Unexplain.psd",
      "pattern": "[url:value = 'https://ali-alomaritrading.cam/ag/Unexplain.psd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:33:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861476/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--922723ba-3893-54cc-9aaa-4b0c70ae511a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.229.219:53079/i",
      "pattern": "[url:value = 'http://42.231.229.219:53079/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861475/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73e94366-40e3-5f89-a268-548de6cb5ed5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.62.160.234:54575/i",
      "pattern": "[url:value = 'http://115.62.160.234:54575/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861474/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce8ad229-c4f8-5e3e-8128-332f9c619476",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ojnkoxdg.pokerbazi.poker/?ublib=aff12a77-472e-4235-aaed-0c450b6fbb56",
      "pattern": "[url:value = 'https://ojnkoxdg.pokerbazi.poker/?ublib=aff12a77-472e-4235-aaed-0c450b6fbb56']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:26:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861473/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ec17518-5e51-59d7-961a-096b8ac7e9cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.57.41.140:54982/i",
      "pattern": "[url:value = 'http://42.57.41.140:54982/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:25:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861472/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--215d9a1b-8df4-5e45-a239-81a74a8ed2be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.15.18:36373/bin.sh",
      "pattern": "[url:value = 'http://110.36.15.18:36373/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:22:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861471/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0792d86-7faf-5083-99ec-7270407f807e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hnainyw.ninjafruitcubes.bet/c4cae652-cd4f-4891-9e7b-3c666782c98f",
      "pattern": "[url:value = 'https://hnainyw.ninjafruitcubes.bet/c4cae652-cd4f-4891-9e7b-3c666782c98f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:19:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861470/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6be58a27-0679-5e30-9db1-82af21845bba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.237.100.188:55199/i",
      "pattern": "[url:value = 'http://42.237.100.188:55199/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861468/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af08ab26-43e0-5fad-932e-04dfdf3e50b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.93.90:54922/i",
      "pattern": "[url:value = 'http://115.59.93.90:54922/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861469/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd455cf3-2d3f-595c-8480-3e353898b690",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://162.248.101.153/n2/teleport",
      "pattern": "[url:value = 'http://162.248.101.153/n2/teleport']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861467/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--521d0bc3-a31e-5612-97ec-ff02a7d3e927",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.39.32:43683/bin.sh",
      "pattern": "[url:value = 'http://110.37.39.32:43683/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:10:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861466/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f2e0d65-e62e-5560-8550-e6f5e7b8e04a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.113.0:57715/i",
      "pattern": "[url:value = 'http://182.127.113.0:57715/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:08:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861465/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--277256b2-ab8b-589b-a6e7-48075f34113e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.62.160.234:54575/bin.sh",
      "pattern": "[url:value = 'http://115.62.160.234:54575/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861464/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52736482-0669-5869-a766-6a4395bf51ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.237.100.188:55199/bin.sh",
      "pattern": "[url:value = 'http://42.237.100.188:55199/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T05:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861463/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39eb7af5-0f4f-58be-9333-9d7b58be0a4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.52.120:38186/bin.sh",
      "pattern": "[url:value = 'http://110.37.52.120:38186/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:58:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861462/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19ded940-8a10-59ba-9364-35b4cc11cfa4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.18.7:43988/i",
      "pattern": "[url:value = 'http://221.15.18.7:43988/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:57:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861461/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a7260e8-342c-5280-9299-73c5b130d9f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.113.0:57715/bin.sh",
      "pattern": "[url:value = 'http://182.127.113.0:57715/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:52:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861460/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--173436a4-011a-5210-95df-7ea19a2cf7b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kodhfeq.one1xbet.net/4e186776-1a0a-42f1-836b-4055caead275",
      "pattern": "[url:value = 'https://kodhfeq.one1xbet.net/4e186776-1a0a-42f1-836b-4055caead275']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:43:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861459/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8919cd3-5e8d-5054-8bb7-77c496073346",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/13.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/13.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:36:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861458/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--292a24de-cfe9-5701-9f04-c29cee447d52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.229.219:53079/bin.sh",
      "pattern": "[url:value = 'http://42.231.229.219:53079/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861457/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53cfd167-1185-552e-ae6b-c24eef29f034",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/disconnected.sh",
      "pattern": "[url:value = 'http://152.236.5.7/disconnected.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:34:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861456/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83981c4e-8760-5c3f-9484-45159221766f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/7.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/7.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:33:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861455/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00eef52c-4582-529a-9e0e-096687db3dee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/8.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/8.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861445/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb095ff2-1e17-5e32-ad64-36bde0820ca4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/11.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/11.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861446/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5ecc7be-e68a-5cb6-8835-f1ff11d1db6a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/3.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/3.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861447/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d14fd2c8-4e56-5f02-87ca-2022c0bd609b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/6.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/6.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861448/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44a1447f-f293-5bce-8cc0-42e2d2c5e393",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/4.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/4.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861449/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0f6bea4-010b-59a9-a44d-d95794fd5c35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/1.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/1.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861450/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37dea9ad-89e7-53af-80fe-60febefb270f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/5.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/5.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861451/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e656068-0ca6-55a6-9ac9-d76f3bc36466",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/9.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/9.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861452/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a1cc9a9-2ac9-50c2-8ce3-e44d10c8c305",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/2.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/2.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861453/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c12278d-0329-5acf-aa72-fe4c72939091",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://152.236.5.7/eat/some/10.tok",
      "pattern": "[url:value = 'http://152.236.5.7/eat/some/10.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861454/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a92a4dca-2691-5c8a-bb73-6c642063cac9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.14.156:50010/i",
      "pattern": "[url:value = 'http://110.37.14.156:50010/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:30:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861444/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a203ccb-6ea0-52ea-9a5a-402fb79b04f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.18.7:43988/bin.sh",
      "pattern": "[url:value = 'http://221.15.18.7:43988/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:27:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861443/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e5ef85b-5297-56dd-a41c-70fe94af67be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.61.116.150:40685/i",
      "pattern": "[url:value = 'http://115.61.116.150:40685/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861442/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c61dcf5f-9c17-54e4-9d21-b26b5b9da544",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.29.111:34271/i",
      "pattern": "[url:value = 'http://182.119.29.111:34271/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861440/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d62f4ddb-c94c-5c37-88f6-a999b4307b1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.28.63.30:38002/i",
      "pattern": "[url:value = 'http://218.28.63.30:38002/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861441/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--246e7977-c611-538a-9fba-8704c21a24a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.178.11:43696/bin.sh",
      "pattern": "[url:value = 'http://222.138.178.11:43696/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:17:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861439/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cb85c64-9fee-5972-8d08-5ec6c8821b2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.14.156:50010/bin.sh",
      "pattern": "[url:value = 'http://110.37.14.156:50010/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:13:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861438/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b269d40-81f0-5d16-b533-f6e938e5662a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.134.148:51148/bin.sh",
      "pattern": "[url:value = 'http://42.230.134.148:51148/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:11:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861437/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd6515a6-0637-5420-b477-c9492cfe369f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.190.98.219:53027/i",
      "pattern": "[url:value = 'http://123.190.98.219:53027/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:11:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861436/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e1852e1-6a05-5e50-b1ef-97381a4befa5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wsiflnb.persian.sex/021d6c05-e7af-45f2-9a47-50743e6ca3b1",
      "pattern": "[url:value = 'https://wsiflnb.persian.sex/021d6c05-e7af-45f2-9a47-50743e6ca3b1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T04:05:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861435/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c72d2f08-7d64-508f-ae3e-a300a2c2013e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.218.61.125:30959/i",
      "pattern": "[url:value = 'http://115.218.61.125:30959/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:59:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861434/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29076a54-1efe-5fd7-888a-4cadc41861e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.28.63.30:38002/bin.sh",
      "pattern": "[url:value = 'http://218.28.63.30:38002/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:56:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861433/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c23b7419-abd4-579d-9308-27f8057f57ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.71.229:53647/i",
      "pattern": "[url:value = 'http://182.117.71.229:53647/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:55:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861432/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df98db72-57b1-5fa9-b378-e4424855dc75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mnnwpo.jamjahani2026.football/59022224-c1d4-46a0-b0dd-c39cc67116bd",
      "pattern": "[url:value = 'https://mnnwpo.jamjahani2026.football/59022224-c1d4-46a0-b0dd-c39cc67116bd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:55:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861431/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--495e70ce-62f7-56a8-be37-f0e2307231d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.206.186.210:46373/bin.sh",
      "pattern": "[url:value = 'http://27.206.186.210:46373/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861430/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecac1ac5-e812-5e81-8e41-1a6b48dbbe21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.190.98.219:53027/bin.sh",
      "pattern": "[url:value = 'http://123.190.98.219:53027/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861429/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb59ecd4-df76-5c99-973f-17f1cf7e5808",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.189.96.59:53161/i",
      "pattern": "[url:value = 'http://196.189.96.59:53161/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:48:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861428/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ac11e0a-ffa5-5537-bf67-ac2b2d3ca185",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.61.116.150:40685/bin.sh",
      "pattern": "[url:value = 'http://115.61.116.150:40685/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:43:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861427/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea689951-31d9-5cf4-ae6c-dbf7a24f9413",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.71.229:53647/bin.sh",
      "pattern": "[url:value = 'http://182.117.71.229:53647/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:34:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861426/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79febe9a-c711-5f2f-813e-6e3a026f82ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.178.239.229:51882/i",
      "pattern": "[url:value = 'http://42.178.239.229:51882/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:32:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861425/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61ee063d-4c0a-5b3e-acbc-53975b521332",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.179.14.168:43035/i",
      "pattern": "[url:value = 'http://42.179.14.168:43035/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:27:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861424/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69201b8f-e6db-5dcc-9206-642195b1205c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.189.96.59:53161/bin.sh",
      "pattern": "[url:value = 'http://196.189.96.59:53161/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:26:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861423/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e448adda-e86e-57ec-843d-0b7818953190",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jjcuameq.parspoker90.com/?ublib=e3e52bd6-abab-4e18-aaf9-1864b69ab397",
      "pattern": "[url:value = 'https://jjcuameq.parspoker90.com/?ublib=e3e52bd6-abab-4e18-aaf9-1864b69ab397']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861422/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52c15ea0-2c22-5d47-8ea3-8cbfe8876ec8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.89.45:44676/i",
      "pattern": "[url:value = 'http://110.36.89.45:44676/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861421/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efaa8d90-21ec-56c7-b399-b32b7fb72749",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://scsadmm.penaltibazi.com/fb1a945f-bcc3-4aff-b4d5-aaee9e739d5e",
      "pattern": "[url:value = 'https://scsadmm.penaltibazi.com/fb1a945f-bcc3-4aff-b4d5-aaee9e739d5e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:22:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861420/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89019a71-2e83-55a6-939a-23b17dde8c8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.151.33:37773/i",
      "pattern": "[url:value = 'http://115.48.151.33:37773/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:20:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861419/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8fee3c4-dc72-585b-8d04-7f1d3612a3c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://aoeseeuk.winpars.casino/?ublib=3eb1a9f9-e004-41f6-85a6-0e7af64ed35a",
      "pattern": "[url:value = 'https://aoeseeuk.winpars.casino/?ublib=3eb1a9f9-e004-41f6-85a6-0e7af64ed35a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:15:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861418/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3397776-9c0d-5a15-a0ef-1b7dc7f95070",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.3.229:56441/i",
      "pattern": "[url:value = 'http://125.41.3.229:56441/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861417/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17b48cfa-e816-5e5d-b131-9f24b23cdba9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.105.51:37334/Mozi.m",
      "pattern": "[url:value = 'http://125.41.105.51:37334/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:10:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861416/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b49a98d-8418-5d2d-a6b1-4bedfbc2eb03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.75.127:57045/i",
      "pattern": "[url:value = 'http://61.52.75.127:57045/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:06:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861415/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62385745-6399-572a-81aa-1aa6922359b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.148.221.82:43457/bin.sh",
      "pattern": "[url:value = 'http://123.148.221.82:43457/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861414/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cee6d536-5213-5e6d-badb-d71b253b9c1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.218.61.125:30959/bin.sh",
      "pattern": "[url:value = 'http://115.218.61.125:30959/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:05:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861413/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4a1088c-7a66-504d-ab05-7d61cd4689e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.139.67.3:58252/bin.sh",
      "pattern": "[url:value = 'http://222.139.67.3:58252/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861412/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b373b6c6-8fcf-57cc-bd29-6642ce5e63be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.241.244:33880/i",
      "pattern": "[url:value = 'http://110.39.241.244:33880/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T03:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861411/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3494685e-fe77-5126-94d7-0db053580efa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.73.13.60:38435/bin.sh",
      "pattern": "[url:value = 'http://39.73.13.60:38435/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:57:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861410/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca5ceeb2-79de-541f-94f1-25f1e620a372",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.3.229:56441/bin.sh",
      "pattern": "[url:value = 'http://125.41.3.229:56441/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:52:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861409/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8663cd9-1605-535a-a7bd-3097090f0bca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.151.33:37773/bin.sh",
      "pattern": "[url:value = 'http://115.48.151.33:37773/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:51:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861408/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--474ec42a-7219-5efe-8053-b7a20ee30f52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.89.45:44676/bin.sh",
      "pattern": "[url:value = 'http://110.36.89.45:44676/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:48:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861407/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aebbbcd4-f8d1-52fd-8263-875c78c09194",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gialird.pishbini11.com/76379832-7a8a-48bc-beed-8bf865190d25",
      "pattern": "[url:value = 'https://gialird.pishbini11.com/76379832-7a8a-48bc-beed-8bf865190d25']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:48:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861406/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3094ff0e-97e7-5c12-9b2c-45515c2efae7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.83.154:41396/i",
      "pattern": "[url:value = 'http://125.40.83.154:41396/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:43:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861405/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8056ee54-fb00-547a-860a-b3de8ea7fd09",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.255.129:43800/i",
      "pattern": "[url:value = 'http://110.39.255.129:43800/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861404/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9c02ce7-15a9-5d34-ac21-fd10546f8304",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.59.79.168:35395/i",
      "pattern": "[url:value = 'http://182.59.79.168:35395/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:38:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861403/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c60117cf-8a46-535f-bf39-d667a50b26f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.55.138.195:46174/i",
      "pattern": "[url:value = 'http://42.55.138.195:46174/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:37:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861402/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd0aa1da-198a-57e9-b9b8-52c5383a7603",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.117.161:34820/bin.sh",
      "pattern": "[url:value = 'http://125.42.117.161:34820/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861401/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea2f4900-3f05-5291-a7ea-df662bc88e93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.57.41.140:54982/bin.sh",
      "pattern": "[url:value = 'http://42.57.41.140:54982/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:28:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861400/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d692fdc-765a-52eb-a8ef-f44b0c7b42eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.111.195:39564/i",
      "pattern": "[url:value = 'http://182.127.111.195:39564/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:27:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861399/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e1f315d-d2ff-5448-94ad-bea189b74179",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.111.195:39564/bin.sh",
      "pattern": "[url:value = 'http://182.127.111.195:39564/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:26:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861398/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf0f85c7-af03-58b9-b86e-270d6c9def6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.59.79.168:35395/bin.sh",
      "pattern": "[url:value = 'http://182.59.79.168:35395/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:14:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861397/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--059af130-60f8-5cc7-a3ce-dfd8fd5c3995",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://byiuatd.pinnaclebetting.bet/79c9b48d-7e93-465b-8816-a5da0113d8b6",
      "pattern": "[url:value = 'https://byiuatd.pinnaclebetting.bet/79c9b48d-7e93-465b-8816-a5da0113d8b6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:05:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861396/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7780aee-9326-5506-afcd-2dc8a6a35057",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.124.216.41:47618/i",
      "pattern": "[url:value = 'http://182.124.216.41:47618/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T02:02:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861395/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4075f21-a0a3-5805-9d0b-e704c2526cad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://naszmks.pinbahiis.com/01df1e5a-28b6-4423-a90d-562ea5dbbca9",
      "pattern": "[url:value = 'https://naszmks.pinbahiis.com/01df1e5a-28b6-4423-a90d-562ea5dbbca9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:58:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861394/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49f8474a-b135-53bc-b67f-33e2d630f5fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://149.71.39.60:37330/i",
      "pattern": "[url:value = 'http://149.71.39.60:37330/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861393/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99011362-3310-5241-96f3-8ae699ebf729",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.21.244:54637/i",
      "pattern": "[url:value = 'http://27.202.21.244:54637/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:55:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861392/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46b3b536-aa70-53fc-888f-93bf27509f55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xgcstm.yasbet90.com/98838503-9036-4eee-bd73-e04e93e221ca",
      "pattern": "[url:value = 'https://xgcstm.yasbet90.com/98838503-9036-4eee-bd73-e04e93e221ca']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861391/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--511136e7-6771-5be1-8c7a-0f909a482103",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.242.135:59321/bin.sh",
      "pattern": "[url:value = 'http://110.39.242.135:59321/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:54:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861390/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67f69892-46c2-5a44-9e27-e0121d52b566",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.113.30:35897/i",
      "pattern": "[url:value = 'http://123.5.113.30:35897/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:48:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861389/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--406fa584-b143-506e-82dc-d2b12ab8cb5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lokino.perfectgameiran.com/df04f85c-8809-4c98-9aef-0cb7a8efe043",
      "pattern": "[url:value = 'https://lokino.perfectgameiran.com/df04f85c-8809-4c98-9aef-0cb7a8efe043']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861388/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35f870e0-4f2a-5e19-aa8c-0ebb80babebe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.151.172.254:44279/i",
      "pattern": "[url:value = 'http://175.151.172.254:44279/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:43:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861387/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--451cfc7c-af11-566a-a779-c71b64074231",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.179.14.168:43035/bin.sh",
      "pattern": "[url:value = 'http://42.179.14.168:43035/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:41:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861386/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc6517c0-de7e-56d8-b6e6-33cc1bfd9e8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.83:57455/i",
      "pattern": "[url:value = 'http://110.36.86.83:57455/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:40:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861385/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--258b5f83-8c75-58b0-9c57-a1691b2fdc89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://220.177.10.118:59693/i",
      "pattern": "[url:value = 'http://220.177.10.118:59693/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:39:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861384/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--291290f3-ab18-565e-91e6-25b4e5cc5ffd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.13.103.118:46258/i",
      "pattern": "[url:value = 'http://123.13.103.118:46258/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:36:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861383/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34e76bc2-73bf-5de8-84c3-3e3cb7564133",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://149.71.39.60:37330/bin.sh",
      "pattern": "[url:value = 'http://149.71.39.60:37330/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861382/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9335d268-5eb7-5d02-9b4a-70595ea36168",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.31.174:38293/i",
      "pattern": "[url:value = 'http://110.37.31.174:38293/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:30:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861380/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18326f25-87db-5b8c-9d32-0e416b5aa36d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.124.216.41:47618/bin.sh",
      "pattern": "[url:value = 'http://182.124.216.41:47618/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:30:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861381/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c20e86a-7f0b-52a3-9534-76a9a478958b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://q62sm4y0.parsgoal90.com/?ublib=be2b69c0-546f-4f0c-b143-f34911b2ba09",
      "pattern": "[url:value = 'https://q62sm4y0.parsgoal90.com/?ublib=be2b69c0-546f-4f0c-b143-f34911b2ba09']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861379/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e17a05-5f2f-5302-b53e-819ad077eadf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://plyxcbx.wrfc8.com/548c6fb3-aea6-4c67-8535-cbe5eae544eb",
      "pattern": "[url:value = 'https://plyxcbx.wrfc8.com/548c6fb3-aea6-4c67-8535-cbe5eae544eb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:23:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861378/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e425189e-e603-5968-a14c-1b1b3e20d1f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.142.242.6:50416/bin.sh",
      "pattern": "[url:value = 'http://222.142.242.6:50416/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:21:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861377/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b545a00d-984e-5659-b6cd-6c18d06f0079",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.228.26.16/azsxd.i6",
      "pattern": "[url:value = 'http://185.228.26.16/azsxd.i6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:18:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861375/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29dab403-5234-5f1c-b841-4d35b89cb47c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.228.26.16/azsxd.i5",
      "pattern": "[url:value = 'http://185.228.26.16/azsxd.i5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:18:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861376/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b751c7cd-17e6-5202-b0ab-fd2c4d4907d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.83:57455/bin.sh",
      "pattern": "[url:value = 'http://110.36.86.83:57455/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:12:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861373/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a6b33bd-ae99-500a-b805-e3723bb293cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.13.103.118:46258/bin.sh",
      "pattern": "[url:value = 'http://123.13.103.118:46258/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:12:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861374/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96b187f6-4536-575f-94ac-ced923fd9de0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.228.26.16/zok",
      "pattern": "[url:value = 'http://185.228.26.16/zok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:08:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861372/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cb78a7b-5e49-57a7-9a69-d4556afcfc6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.225.173:59095/bin.sh",
      "pattern": "[url:value = 'http://110.39.225.173:59095/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:03:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861371/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d4e9c77-fe21-5753-b079-1a2bb6f9aba8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.113.30:35897/bin.sh",
      "pattern": "[url:value = 'http://123.5.113.30:35897/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T01:01:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861370/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a4c3824-c054-5ef5-bbb4-52a5099ed7aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.21.244:54637/bin.sh",
      "pattern": "[url:value = 'http://27.202.21.244:54637/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:58:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861369/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6e81711-4029-554c-8847-f2a3abda7fbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.123.4:52586/i",
      "pattern": "[url:value = 'http://182.127.123.4:52586/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:57:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861368/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ff166a8-a027-5ae9-9c57-946d02d613d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.8.140:57454/i",
      "pattern": "[url:value = 'http://222.141.8.140:57454/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861367/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--406559ef-9572-5872-999f-011b1e3f193a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.225.173:59095/i",
      "pattern": "[url:value = 'http://110.39.225.173:59095/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861366/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf34f4ec-1b94-58f4-ba87-c5edb457cf46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pblgwhm.x50wheel.bet/ba8cbffa-a66a-425a-b2a0-6cef190a72a8",
      "pattern": "[url:value = 'https://pblgwhm.x50wheel.bet/ba8cbffa-a66a-425a-b2a0-6cef190a72a8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:40:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861365/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e560722d-23b8-5a0d-862b-8f1897de38c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.123.4:52586/bin.sh",
      "pattern": "[url:value = 'http://182.127.123.4:52586/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:29:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861364/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a3be309-2917-5cab-9968-b072bf35ea59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.231.231.221:34181/bin.sh",
      "pattern": "[url:value = 'http://112.231.231.221:34181/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:21:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861363/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77abe10a-e309-571d-bc5d-9bde60757011",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.173.199:55532/i",
      "pattern": "[url:value = 'http://115.55.173.199:55532/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:17:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861362/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7bf1ff1-d210-5b51-b63b-4d57e32b796e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.8.140:57454/bin.sh",
      "pattern": "[url:value = 'http://222.141.8.140:57454/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861361/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e283aa68-0258-51ed-91b7-6c79dd7c8bae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.248.246:53594/i",
      "pattern": "[url:value = 'http://182.114.248.246:53594/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:11:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861360/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2922c26f-18cc-5470-80c4-701537dd6267",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://24.54.95.49:46412/i",
      "pattern": "[url:value = 'http://24.54.95.49:46412/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861359/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37482cc4-56cc-5824-848a-51f65aad5603",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://oknmhjx.xenicalby6.com/476edb17-af55-41b7-b1b1-1031ae7db70e",
      "pattern": "[url:value = 'https://oknmhjx.xenicalby6.com/476edb17-af55-41b7-b1b1-1031ae7db70e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-09T00:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861358/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ec4dca6-867b-5e30-b13f-b518ff677e48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.173.199:55532/bin.sh",
      "pattern": "[url:value = 'http://115.55.173.199:55532/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:56:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861357/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--723ca6a4-51a8-51ef-80d3-fd4f5337ca88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.248.246:53594/bin.sh",
      "pattern": "[url:value = 'http://182.114.248.246:53594/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:52:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861356/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fe9096c-d29a-5836-b36f-d745814ccb54",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nnwhxh.pik.bet/079debf7-5af8-45e9-931f-d5f40c7e37f2",
      "pattern": "[url:value = 'https://nnwhxh.pik.bet/079debf7-5af8-45e9-931f-d5f40c7e37f2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:49:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861355/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72037475-b464-59b3-98e1-4e8d712345d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.114.151:37096/i",
      "pattern": "[url:value = 'http://182.116.114.151:37096/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:48:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861354/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7f29562-7294-5d02-ac56-f6fc263bccb3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://24.54.95.49:46412/bin.sh",
      "pattern": "[url:value = 'http://24.54.95.49:46412/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861353/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7370879-fa5e-518e-a9ab-6c554707b2be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://deglis.perspolisbet.bet/0ccfc2d2-d321-4996-a489-e4d238708dbb",
      "pattern": "[url:value = 'https://deglis.perspolisbet.bet/0ccfc2d2-d321-4996-a489-e4d238708dbb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:36:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861352/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--401a47a2-ded2-5659-aabe-608b3dbb17df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.94.159:52162/i",
      "pattern": "[url:value = 'http://182.112.94.159:52162/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:33:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861351/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd259b1b-2e41-5136-89b9-607845ff893c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.244.159:34986/bin.sh",
      "pattern": "[url:value = 'http://123.9.244.159:34986/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861350/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75efe8e0-6289-5718-b98a-e1e2f520efb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://akvljg.perspolisbet90.com/a7d66692-744f-43c6-934b-00ab440ef5f6",
      "pattern": "[url:value = 'https://akvljg.perspolisbet90.com/a7d66692-744f-43c6-934b-00ab440ef5f6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861349/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--965867e4-074a-591e-b684-dcc223569e46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nlwgc0c9.yekbetiran.com/?ublib=7bafc7d1-4304-4eba-87fe-09270e041e20",
      "pattern": "[url:value = 'https://nlwgc0c9.yekbetiran.com/?ublib=7bafc7d1-4304-4eba-87fe-09270e041e20']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:24:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861348/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--585dd366-e352-5eb7-b25e-cbd8ff3541e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://frowben.yasbetapp.com/14b2f418-16ae-46d6-96df-632a666d6fed",
      "pattern": "[url:value = 'https://frowben.yasbetapp.com/14b2f418-16ae-46d6-96df-632a666d6fed']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:23:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861347/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7826f0c4-4cdf-56e8-ba38-5f066ae0d43a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.194.83:34795/i",
      "pattern": "[url:value = 'http://115.55.194.83:34795/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:18:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861346/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a4277ea-39ca-56c9-aa99-01cea596398e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.133.221.207:57291/i",
      "pattern": "[url:value = 'http://123.133.221.207:57291/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861345/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4239b885-4de5-5885-95a8-be7c49d107b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.114.151:37096/bin.sh",
      "pattern": "[url:value = 'http://182.116.114.151:37096/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861344/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f72f185-3261-501a-aa59-94256d916c1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gsoxdy.vezaratshart.com/8ffae4a0-a86f-48c5-9ce3-3ac989576823",
      "pattern": "[url:value = 'https://gsoxdy.vezaratshart.com/8ffae4a0-a86f-48c5-9ce3-3ac989576823']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:15:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861343/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bb9b050-5c1d-56ce-aae3-f023bf832046",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://147.45.209.244:43580/i",
      "pattern": "[url:value = 'http://147.45.209.244:43580/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:10:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861342/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4750a299-8ea4-552d-8f58-a62d5001a981",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pvvvvn.perfectgame.casino/09e345db-c3c0-488b-99e6-bf7d4edd4628",
      "pattern": "[url:value = 'https://pvvvvn.perfectgame.casino/09e345db-c3c0-488b-99e6-bf7d4edd4628']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:08:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861341/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1d068a9-d25d-5467-9232-326bdfc93108",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.75.14.107:46683/i",
      "pattern": "[url:value = 'http://39.75.14.107:46683/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T23:00:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861340/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffa9e9b7-90da-5e1a-a738-c3bb7ac19b68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.88.97:49999/i",
      "pattern": "[url:value = 'http://221.15.88.97:49999/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:54:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861339/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d1ae679-7e9c-5141-a9d5-9d210e34ad66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sewgqnm.winxbet.co/a001e2c9-70b4-4f77-8503-366bdda8ab4a",
      "pattern": "[url:value = 'https://sewgqnm.winxbet.co/a001e2c9-70b4-4f77-8503-366bdda8ab4a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:49:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861338/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cad3aeb7-2514-54e0-8bd6-5e813ffa689a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://147.45.209.244:43580/bin.sh",
      "pattern": "[url:value = 'http://147.45.209.244:43580/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:49:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861337/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6b852ca-77eb-5983-9dd0-213b52d13640",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.186.150:60114/i",
      "pattern": "[url:value = 'http://221.15.186.150:60114/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:43:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861336/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7906c64f-9be9-516c-b17a-d34d8073d8df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.177.28.149:55113/bin.sh",
      "pattern": "[url:value = 'http://203.177.28.149:55113/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861335/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee6e2c7c-4a3b-570e-aa20-3d5d928c8988",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.235.10:41358/i",
      "pattern": "[url:value = 'http://123.4.235.10:41358/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:41:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861334/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b402d3d-d0c4-5d4c-9339-695fff8f46ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.194.83:34795/bin.sh",
      "pattern": "[url:value = 'http://115.55.194.83:34795/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:39:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861333/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1978fc8c-8c3c-54ca-bc53-99764129b66d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lohgcyy.winsportiran.com/a794a49b-d184-4af2-a23e-a319e88bbcfd",
      "pattern": "[url:value = 'https://lohgcyy.winsportiran.com/a794a49b-d184-4af2-a23e-a319e88bbcfd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:34:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861332/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d41251e7-d35d-54ee-8c58-ae79ebdcf168",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://109.226.203.246:10650/i",
      "pattern": "[url:value = 'http://109.226.203.246:10650/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:33:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861331/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c42f756-c944-5366-92ea-8a3a4d43232a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.88.97:49999/bin.sh",
      "pattern": "[url:value = 'http://221.15.88.97:49999/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:31:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861330/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c3d6472-35fa-56fb-b7ff-01a227724449",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://e40nbbpq.winmastersbetiran.com/?ublib=85d7b6e5-ac5d-4e59-9d64-9b0e4b30b594",
      "pattern": "[url:value = 'https://e40nbbpq.winmastersbetiran.com/?ublib=85d7b6e5-ac5d-4e59-9d64-9b0e4b30b594']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:16:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861329/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--604505f7-e5bd-502f-99b5-cdd146831f49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.235.10:41358/bin.sh",
      "pattern": "[url:value = 'http://123.4.235.10:41358/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:14:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861328/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34f37a24-64e0-5ed0-a16c-f4e0ab3136df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.16.245:48342/i",
      "pattern": "[url:value = 'http://123.12.16.245:48342/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:14:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861327/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--145d6a22-75a7-5f38-94d3-bf5f077d39ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.215.201.192:57234/i",
      "pattern": "[url:value = 'http://60.215.201.192:57234/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:13:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861326/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74e5a22e-7069-5764-a378-63c18aecb5c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://178.16.54.109/l.exe",
      "pattern": "[url:value = 'http://178.16.54.109/l.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861325/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f79351eb-665e-5601-9130-27bb2c9db3f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.44.137.10:41284/i",
      "pattern": "[url:value = 'http://103.44.137.10:41284/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:10:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861324/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f87d8973-1ec3-50fe-b6ab-3b18fc696234",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.68.112:59921/i",
      "pattern": "[url:value = 'http://182.117.68.112:59921/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:05:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861323/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aef685b-c833-5206-9957-d3af88670386",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://109.226.203.246:10650/bin.sh",
      "pattern": "[url:value = 'http://109.226.203.246:10650/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:04:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861322/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6befe473-c6b4-56a8-b4fa-09c147b32111",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.55.138.195:46174/bin.sh",
      "pattern": "[url:value = 'http://42.55.138.195:46174/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T22:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861321/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab249d84-aa64-5538-968c-d41d2a4ef71c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xeledkz.olabahiskayit.com/32a26452-8744-4b4d-bf14-45c91273590b",
      "pattern": "[url:value = 'https://xeledkz.olabahiskayit.com/32a26452-8744-4b4d-bf14-45c91273590b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:56:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861320/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--657caa28-95d9-569b-bd24-45b31e4d3e9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.16.245:48342/bin.sh",
      "pattern": "[url:value = 'http://123.12.16.245:48342/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:52:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861319/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--483a52af-40c8-52af-a3b9-03474e4f8de6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.79.239:59037/i",
      "pattern": "[url:value = 'http://115.49.79.239:59037/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:49:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861318/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6a90570-4615-5e55-8e93-6f4f6e77864c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.215.201.192:57234/bin.sh",
      "pattern": "[url:value = 'http://60.215.201.192:57234/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:48:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861317/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c40abe7-5e0a-5a68-9189-217285813651",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.68.112:59921/bin.sh",
      "pattern": "[url:value = 'http://182.117.68.112:59921/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:48:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861316/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a228d38f-270e-5824-94cb-af18e29413fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.231.231.221:34181/i",
      "pattern": "[url:value = 'http://112.231.231.221:34181/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:47:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861315/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a136c695-1bd3-59eb-9a97-e52ecb293e7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.79.239:59037/bin.sh",
      "pattern": "[url:value = 'http://115.49.79.239:59037/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861314/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7df8e640-739b-5333-b430-06c364529236",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.44.137.10:41284/bin.sh",
      "pattern": "[url:value = 'http://103.44.137.10:41284/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:35:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861313/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--457b123c-5e40-5dd5-be82-9c7ba35da947",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.156.100.119:52257/i",
      "pattern": "[url:value = 'http://219.156.100.119:52257/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:35:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861312/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46bea9fb-6078-58dc-b8af-3d0ab06e8e2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.158.25:39999/i",
      "pattern": "[url:value = 'http://61.52.158.25:39999/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861311/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6e9bc11-6b4f-51b8-8aea-242274096026",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xf4v3zjk.parspoker.casino/?ublib=00183947-2f1b-4c64-bbae-a9454ceec829",
      "pattern": "[url:value = 'https://xf4v3zjk.parspoker.casino/?ublib=00183947-2f1b-4c64-bbae-a9454ceec829']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:23:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861310/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2300ff4b-769c-5173-8a02-c82bd22f8abd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.88.136.194:48385/i",
      "pattern": "[url:value = 'http://36.88.136.194:48385/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:22:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861309/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77ba5035-7c09-5cb3-a311-498490e8c1a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.233.106.173:50709/i",
      "pattern": "[url:value = 'http://42.233.106.173:50709/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:21:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861308/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7e5f625-1ab1-5efc-8b69-be7657be73b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.133.221.207:57291/bin.sh",
      "pattern": "[url:value = 'http://123.133.221.207:57291/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:18:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861307/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--551e99fc-beda-5a0e-93be-27d56cebec89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ngieimu.kvbel.com/207aff48-98af-419a-90c1-2a51478c7023",
      "pattern": "[url:value = 'https://ngieimu.kvbel.com/207aff48-98af-419a-90c1-2a51478c7023']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:18:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861306/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b428c762-c0c7-5432-9fdf-03e6e96e27b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.131.132.59:36471/i",
      "pattern": "[url:value = 'http://124.131.132.59:36471/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:15:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861305/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4414720-f85a-5314-8070-08bb3fb39d7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.196.219:40877/bin.sh",
      "pattern": "[url:value = 'http://110.38.196.219:40877/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:12:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861304/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74620cab-4692-5baf-93e9-ca2f9e940195",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.88.136.194:48385/bin.sh",
      "pattern": "[url:value = 'http://36.88.136.194:48385/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:08:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861303/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06de263a-2dae-5ef7-9011-436d7d04abe7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zfomko.jamjahani.cash/43516c7b-0f0a-43fe-9759-04c062ca6542",
      "pattern": "[url:value = 'https://zfomko.jamjahani.cash/43516c7b-0f0a-43fe-9759-04c062ca6542']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:08:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861302/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--484f3bf9-9b70-5580-aa4e-861f2e93f353",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.23.100.4:54273/i",
      "pattern": "[url:value = 'http://175.23.100.4:54273/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T21:01:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861301/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af66d30c-7336-5dde-a496-9d4724d9d047",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.158.25:39999/bin.sh",
      "pattern": "[url:value = 'http://61.52.158.25:39999/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861300/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45acedb2-f9ff-5486-b447-f4452d843086",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.233.106.173:50709/bin.sh",
      "pattern": "[url:value = 'http://42.233.106.173:50709/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:58:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861299/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--258427c0-bc28-5c48-94c6-3cfcf4927027",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.86.95:45703/i",
      "pattern": "[url:value = 'http://182.127.86.95:45703/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861298/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfc351e6-17fe-5933-a4c0-a411c98903fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.21.120.140:51671/i",
      "pattern": "[url:value = 'http://218.21.120.140:51671/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:48:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861297/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f409c02-fb8e-52ae-bf6e-72ffcb05223f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.109.95:53024/i",
      "pattern": "[url:value = 'http://115.56.109.95:53024/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:46:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861296/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddd0fbca-e0e1-5db8-b623-2aaa4052d50b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rbbhubp.kbshavanese.com/837f2a29-bebf-4ec0-bbde-1df037eb0354",
      "pattern": "[url:value = 'https://rbbhubp.kbshavanese.com/837f2a29-bebf-4ec0-bbde-1df037eb0354']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:43:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861295/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94ef31a8-0cfb-508c-bf5b-dde3c7772adf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.53.78:35791/i",
      "pattern": "[url:value = 'http://39.74.53.78:35791/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:40:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861294/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--357ec0f0-97f3-55a1-a9ad-a68ac2879909",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.30.168:34217/i",
      "pattern": "[url:value = 'http://115.59.30.168:34217/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:39:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861293/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6b362d1-622e-52fe-a051-4f993d3a6596",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.61.0.7:52909/i",
      "pattern": "[url:value = 'http://115.61.0.7:52909/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:36:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861292/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dd0ab82-b465-5ce4-9e5b-6ed3bda3df8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.148.244:56209/i",
      "pattern": "[url:value = 'http://115.48.148.244:56209/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861291/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09a34d87-0eb9-5081-b960-cb34059c4f69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.14.251:40665/bin.sh",
      "pattern": "[url:value = 'http://110.37.14.251:40665/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861290/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55c07ff9-d8c8-5d29-abd9-afa989f66cd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.109.95:53024/bin.sh",
      "pattern": "[url:value = 'http://115.56.109.95:53024/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:22:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861289/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88abf935-a0be-5b23-9b67-9351d09439da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.21.120.140:51671/bin.sh",
      "pattern": "[url:value = 'http://218.21.120.140:51671/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:20:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861288/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bd0bbe4-302d-5f2f-a125-e6f9373a8bd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.30.168:34217/bin.sh",
      "pattern": "[url:value = 'http://115.59.30.168:34217/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:13:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861287/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c39eaec4-d28b-5614-9192-6a5cc30dcdab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.61.0.7:52909/bin.sh",
      "pattern": "[url:value = 'http://115.61.0.7:52909/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:11:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861286/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3ffd7d2-d023-532a-a795-b21eca77a13b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.237.106.195:37233/i",
      "pattern": "[url:value = 'http://113.237.106.195:37233/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:07:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861285/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e335b70-7947-5af6-8e31-ff1c5b9f6058",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.148.244:56209/bin.sh",
      "pattern": "[url:value = 'http://115.48.148.244:56209/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:03:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861284/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66addaee-5770-5808-9c4f-ae9b329345ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ojpqxkm.one1x.bet/d974017e-43a8-43bf-b31b-804c70fad1a3",
      "pattern": "[url:value = 'https://ojpqxkm.one1x.bet/d974017e-43a8-43bf-b31b-804c70fad1a3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T20:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861283/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c500848-46c4-5e6f-abf4-d49abcb24788",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.15.222:56863/i",
      "pattern": "[url:value = 'http://123.11.15.222:56863/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:57:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861282/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5e88c1b-f59e-5a7c-b733-72ada205e27a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.112.149:48462/i",
      "pattern": "[url:value = 'http://112.248.112.149:48462/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861281/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--122356ef-1940-5550-b471-e4d930acd05d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.99.106:52760/i",
      "pattern": "[url:value = 'http://42.224.99.106:52760/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:54:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861280/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4f4c396-8c2b-5cea-ab24-cdf458c6749f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.71.226:38983/i",
      "pattern": "[url:value = 'http://123.8.71.226:38983/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:53:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861279/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7057443d-ec85-582b-9050-a506246356e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.173:49464/i",
      "pattern": "[url:value = 'http://110.36.80.173:49464/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861278/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02b1afca-bff5-5f77-9f17-812d3a5608e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.77.230:54386/i",
      "pattern": "[url:value = 'http://182.117.77.230:54386/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:52:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861277/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ac7c09c-bb30-5243-9761-8746be7bf12e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://107.173.9.85/httpswww.tcs.comwhat-we-dotcs-research-and-innovation-group-comapnies.php/",
      "pattern": "[url:value = 'https://107.173.9.85/httpswww.tcs.comwhat-we-dotcs-research-and-innovation-group-comapnies.php/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbbb9288-d33b-5a58-85cf-5a5cbe4cf5b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/509/ews/createbestventreforbestpeopelsforme.hta",
      "pattern": "[url:value = 'http://107.173.9.85/509/ews/createbestventreforbestpeopelsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db146b95-b23b-5a92-ab22-f21bde26ee65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/httpswww.microsoft.comen-usmicrosoft-365wordms.officeurl=word&ocid=cmmiqc2gd00Plans-and-pricing.php",
      "pattern": "[url:value = 'http://107.173.9.85/httpswww.microsoft.comen-usmicrosoft-365wordms.officeurl=word&ocid=cmmiqc2gd00Plans-and-pricing.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d29ff37-0f33-5ce9-8db6-a45401637364",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/59/img_005019.png",
      "pattern": "[url:value = 'http://107.173.9.85/59/img_005019.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04c7d5fb-0746-5116-8970-980c98ef67d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/66/img_230815.png",
      "pattern": "[url:value = 'http://107.173.9.85/66/img_230815.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74f1e657-a2b8-51be-9daf-e804d81faa55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/115/greatnoteswithbestviewthings.hta",
      "pattern": "[url:value = 'http://107.173.9.85/115/greatnoteswithbestviewthings.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f05ecede-f4a4-550e-bc40-0c0e030a388c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/httpsexpertinsights.comdata-security-and-privacytop-secure-file-sharing-storage-services-airline.php",
      "pattern": "[url:value = 'http://107.173.9.85/httpsexpertinsights.comdata-security-and-privacytop-secure-file-sharing-storage-services-airline.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f237e21-fa82-54a0-a0c0-ab048f4dd834",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://107.173.9.85/406/wedeservebetterfeatureforgoldennetworkbuty.hta",
      "pattern": "[url:value = 'https://107.173.9.85/406/wedeservebetterfeatureforgoldennetworkbuty.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e44e6c96-fd2f-56fd-a8ce-bf96219d07be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/59/fundingforbetterfuturegetmebestthings.hta",
      "pattern": "[url:value = 'http://107.173.9.85/59/fundingforbetterfuturegetmebestthings.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861275/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e443c4f5-e0f9-5fb6-acba-a22baa10c90b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://107.173.9.85/107/glutatheyongoodforhealthme.hta",
      "pattern": "[url:value = 'https://107.173.9.85/107/glutatheyongoodforhealthme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861276/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--605ab156-161d-5d95-9103-78fabb5b7ff0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/509/goodthingswithbetterwaysgivenformebest.js",
      "pattern": "[url:value = 'http://107.173.9.85/509/goodthingswithbetterwaysgivenformebest.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba1488fb-106b-5995-9061-43e0898a9318",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/68/img_231637.png",
      "pattern": "[url:value = 'http://107.173.9.85/68/img_231637.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cacc6e97-8cc6-5900-b045-eb0d2dd88d2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/406/img_101655.png",
      "pattern": "[url:value = 'http://107.173.9.85/406/img_101655.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:50:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7203bc3-0de3-5725-8275-a8bea1d4a405",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://49.89.90.71:34024/bin.sh",
      "pattern": "[url:value = 'http://49.89.90.71:34024/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:41:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96c062b3-dda6-525a-90ff-92e0fd642973",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.199.162:51401/i",
      "pattern": "[url:value = 'http://110.38.199.162:51401/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:31:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df44b1be-8975-5cf6-be0e-0590d2a9fb8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.99.106:52760/bin.sh",
      "pattern": "[url:value = 'http://42.224.99.106:52760/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7614804-a585-5040-8a72-65cd293c8bfd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.77.230:54386/bin.sh",
      "pattern": "[url:value = 'http://182.117.77.230:54386/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:26:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30e6c0b4-9945-52b2-8b3f-40adc81b4078",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://chzldmh3.parsbet90.com/?ublib=910458e1-bfbe-4992-a5ca-db2e9863a6a3",
      "pattern": "[url:value = 'https://chzldmh3.parsbet90.com/?ublib=910458e1-bfbe-4992-a5ca-db2e9863a6a3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:23:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee79f10a-3a13-59e2-8fad-6e269f2c8ee0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pbustxk.penalty.casino/5b96c8b8-553e-4961-9ac2-19e7cb57ca41",
      "pattern": "[url:value = 'https://pbustxk.penalty.casino/5b96c8b8-553e-4961-9ac2-19e7cb57ca41']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96c1f1ac-dc00-5d30-8170-63815b33cc6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.55.57:35922/i",
      "pattern": "[url:value = 'http://115.48.55.57:35922/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b44e62f6-3027-5d74-a0be-63e2890fb5cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.73.13.60:38435/i",
      "pattern": "[url:value = 'http://39.73.13.60:38435/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:21:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82299469-da0e-558f-af0e-e46553cc8c6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.173:49464/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.173:49464/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:20:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11957328-3110-59a1-869f-a0346d996329",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.38.109:33997/i",
      "pattern": "[url:value = 'http://222.141.38.109:33997/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:17:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--006b7a3f-9b7c-5ccc-bb26-60a5f43d50f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/voicatch/voicath/raw/refs/heads/main/macOSx.zip.part2",
      "pattern": "[url:value = 'https://github.com/voicatch/voicath/raw/refs/heads/main/macOSx.zip.part2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:12:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89399709-ee19-539e-af6f-f629009fd1f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/voicatch/voicath/raw/refs/heads/main/macOSx.zip.part1",
      "pattern": "[url:value = 'https://github.com/voicatch/voicath/raw/refs/heads/main/macOSx.zip.part1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:12:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bacf99f-cfcb-5139-b4a7-06be1478406d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://raw.githubusercontent.com/voicatch/voicath/refs/heads/main/file.vbs",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/voicatch/voicath/refs/heads/main/file.vbs']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:12:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa01373b-b7f4-5ab2-98dc-f0c2180468f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/voicatch/voicath/raw/refs/heads/main/file.vbs",
      "pattern": "[url:value = 'https://github.com/voicatch/voicath/raw/refs/heads/main/file.vbs']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:12:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bac7399f-66a6-57cc-b728-4bd276a2f771",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://as.al/file/Ssn2Eg",
      "pattern": "[url:value = 'https://as.al/file/Ssn2Eg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd0a641e-7044-5423-8f1d-a7744c92e051",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1c3yPqyiOSZuYr4esZuapLYdVR2utpNLU",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1c3yPqyiOSZuYr4esZuapLYdVR2utpNLU']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1996f4ed-98d0-54a6-b04f-d24fc0dbd106",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/807/img_222216.png",
      "pattern": "[url:value = 'http://107.173.9.85/807/img_222216.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:09:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca56e5e1-f3e0-5169-87b4-e247ea0a21c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mybjuv.jamjahani.football/4e1583cb-671b-4768-9f39-b8f1906589d7",
      "pattern": "[url:value = 'https://mybjuv.jamjahani.football/4e1583cb-671b-4768-9f39-b8f1906589d7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:07:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--287b6fa9-e46a-5f86-9df2-0d60c299a54c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://87.232.123.174/f",
      "pattern": "[url:value = 'http://87.232.123.174/f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:05:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8a02451-ac27-5eb1-a78e-37bd914ceb76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://87.232.123.174/p",
      "pattern": "[url:value = 'http://87.232.123.174/p']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:05:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a49c247e-d2b5-565c-9539-cd31e2ad2c1d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=14FKurqnz1Ju1VngnvXdKRQlHpUuOwloE",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=14FKurqnz1Ju1VngnvXdKRQlHpUuOwloE']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:05:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4261b824-3dcc-57d0-936e-d43b4ee6e453",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.55.57:35922/bin.sh",
      "pattern": "[url:value = 'http://115.48.55.57:35922/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T19:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88d88826-7c83-5aee-b100-39c80fc21ac4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pbtgvx.pablobet90.com/9adfe7fa-3f43-4a7e-be03-899e3f5a3b4a",
      "pattern": "[url:value = 'https://pbtgvx.pablobet90.com/9adfe7fa-3f43-4a7e-be03-899e3f5a3b4a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:59:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--572061fe-ceef-5edb-9542-5ea0f17bc36a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.196.130:50938/bin.sh",
      "pattern": "[url:value = 'http://182.119.196.130:50938/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:49:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3b20d16-2449-5be7-bed0-40f6d12ad4be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://twvjaye.penalti.website/cc2e6594-4590-49c7-b608-bff1d8bcd277",
      "pattern": "[url:value = 'https://twvjaye.penalti.website/cc2e6594-4590-49c7-b608-bff1d8bcd277']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:48:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e77a8b2-d676-5671-bef1-ae10c2983ec7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://aencte.oxidbet.bet/2fcb2b8c-ae9a-4163-afe8-65a0ff051b3a",
      "pattern": "[url:value = 'https://aencte.oxidbet.bet/2fcb2b8c-ae9a-4163-afe8-65a0ff051b3a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:45:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad920b59-1548-5aa6-ad9c-86b8432fb18c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zoasav.onlineshart.com/bbac5e20-ddbb-4b2a-a502-8341621c0f0f",
      "pattern": "[url:value = 'https://zoasav.onlineshart.com/bbac5e20-ddbb-4b2a-a502-8341621c0f0f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:40:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f1bc61b-94f1-53c3-825b-dc6629c1abde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.80:41763/bin.sh",
      "pattern": "[url:value = 'http://163.142.92.80:41763/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9fdd74e-10cd-5194-a273-90e866975b24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.252.234.243:39147/i",
      "pattern": "[url:value = 'http://218.252.234.243:39147/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:38:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86661e41-bc43-58f0-ad18-f496c2bb2f7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.95.137:60706/i",
      "pattern": "[url:value = 'http://182.116.95.137:60706/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:37:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c6fa720-6372-5ecf-95f5-a505dbe0fa22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.113.30:39124/i",
      "pattern": "[url:value = 'http://110.37.113.30:39124/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:36:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c974025c-3681-58be-a94e-081b9d65ab6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.120.19:36748/bin.sh",
      "pattern": "[url:value = 'http://182.116.120.19:36748/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:34:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--260c01c4-f574-5cc1-9696-6f27ea132393",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.147.15:53462/i",
      "pattern": "[url:value = 'http://221.15.147.15:53462/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:28:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53e0d48a-b04c-57ff-9eb4-9ff913c1d214",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.147.15:53462/bin.sh",
      "pattern": "[url:value = 'http://221.15.147.15:53462/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:26:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a829205-265d-5537-a168-9db84add2e6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://122.233.28.34:52333/i",
      "pattern": "[url:value = 'http://122.233.28.34:52333/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:19:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c987322-616b-55a1-9ffc-879d56702931",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.113.30:39124/bin.sh",
      "pattern": "[url:value = 'http://110.37.113.30:39124/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:11:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26530a6e-f50f-51d1-8ed4-ce063a1b6651",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.252.234.243:39147/bin.sh",
      "pattern": "[url:value = 'http://218.252.234.243:39147/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:10:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13185602-a8f0-558f-9f87-a62a0fd009d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zexrhdz.penaltibazi.com/115ccc47-a990-4938-84e7-b00df6d6deaa",
      "pattern": "[url:value = 'https://zexrhdz.penaltibazi.com/115ccc47-a990-4938-84e7-b00df6d6deaa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:08:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c96ac43-570d-5553-a2b7-a90a1a864aa3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.95.137:60706/bin.sh",
      "pattern": "[url:value = 'http://182.116.95.137:60706/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:07:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c874fe6-5d41-5b31-bcef-fe90672286bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://122.233.28.34:52333/bin.sh",
      "pattern": "[url:value = 'http://122.233.28.34:52333/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:05:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ccadb65-1ec4-5821-a256-2921ce7888a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.187.206.255:58942/i",
      "pattern": "[url:value = 'http://119.187.206.255:58942/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T18:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb587aee-2ce5-5086-8264-b059f80025d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.207.201:50335/i",
      "pattern": "[url:value = 'http://123.4.207.201:50335/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:53:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bc677e0-a175-5823-aa1b-4540992c1e02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.103.213:39768/i",
      "pattern": "[url:value = 'http://110.37.103.213:39768/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:48:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cedbef73-b382-5a75-8179-316b2931cb0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.163:38574/i",
      "pattern": "[url:value = 'http://110.36.80.163:38574/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:46:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a0717f2-31ab-5f44-804f-932caa92e081",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6a41da",
      "pattern": "[url:value = 'http://45.205.1.59/6a41da']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d1bde1b-ab0d-5304-8659-267ed845b62e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5dd7bf",
      "pattern": "[url:value = 'http://45.205.1.59/5dd7bf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83b4c2c9-119a-5460-95aa-c25be2a09568",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2a30e9",
      "pattern": "[url:value = 'http://45.205.1.59/2a30e9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1431ec28-657b-5999-9d77-3569798ad5f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c2bd1d",
      "pattern": "[url:value = 'http://45.205.1.59/c2bd1d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc74f9cf-ab5e-5d66-a5af-f49f58a0eeb5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/631474",
      "pattern": "[url:value = 'http://45.205.1.59/631474']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ceae16da-d6b1-5caf-8868-761361bf630a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/928fd9",
      "pattern": "[url:value = 'http://45.205.1.59/928fd9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3331ec5c-5ce5-5e67-877f-4955b7a040ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/36ff62",
      "pattern": "[url:value = 'http://45.205.1.59/36ff62']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd3d29d9-7582-59a7-bddd-13f9e8cee2ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/552589",
      "pattern": "[url:value = 'http://45.205.1.59/552589']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3adc12c3-77e8-5224-90fa-aa27478475d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/91e87a",
      "pattern": "[url:value = 'http://45.205.1.59/91e87a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861211/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34eb42fd-3670-51df-9f0c-a19df2e67cd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2ebade",
      "pattern": "[url:value = 'http://45.205.1.59/2ebade']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cec708f2-cddb-5df6-8cc4-7122638cc1a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2e2e37",
      "pattern": "[url:value = 'http://45.205.1.59/2e2e37']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:39:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4efec265-d179-5843-b3db-184701f17228",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/42ac6c",
      "pattern": "[url:value = 'http://45.205.1.59/42ac6c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d0a1c62-2dbc-5458-85d5-6416ea965fea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/626343",
      "pattern": "[url:value = 'http://45.205.1.59/626343']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64f75a80-875c-5c1b-a23f-f700ef9a31c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/oxE",
      "pattern": "[url:value = 'http://188.132.232.81/oxE']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f501bfae-6a95-582f-b593-7895600cfee3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/vvAr",
      "pattern": "[url:value = 'http://188.132.232.81/vvAr']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--871dbb20-338b-505b-86f4-bf3b401f69d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e14641",
      "pattern": "[url:value = 'http://45.205.1.59/e14641']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9670eff8-5216-504e-957b-0b270fdf95f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/BkeO",
      "pattern": "[url:value = 'http://188.132.232.81/BkeO']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--178f9d9b-7213-59d4-9d5c-295d2e081856",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ZzK",
      "pattern": "[url:value = 'http://188.132.232.81/ZzK']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c201559d-a78a-5992-be82-b41516669bb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a8611e",
      "pattern": "[url:value = 'http://45.205.1.59/a8611e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ea00cc7-1dce-5529-923e-b8f6418b6ee6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b1e187",
      "pattern": "[url:value = 'http://45.205.1.59/b1e187']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--558e9f22-34a0-5a91-9737-32dd329eb08f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ISE4",
      "pattern": "[url:value = 'http://188.132.232.81/ISE4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41a43238-0528-532b-9746-51aa0d9ebab7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/tCF",
      "pattern": "[url:value = 'http://188.132.232.81/tCF']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd9d5c0f-7401-55bf-a793-03a5f98517a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/XzWB",
      "pattern": "[url:value = 'http://188.132.232.81/XzWB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8d46b65-bc3b-56e7-a477-708eb3ccda94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/vQUq",
      "pattern": "[url:value = 'http://188.132.232.81/vQUq']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a81bdb4b-296d-5fae-b146-720a1386321d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/cjz",
      "pattern": "[url:value = 'http://188.132.232.81/cjz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34a708b9-4c3c-5e48-8635-55ca330fcc69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/16466a",
      "pattern": "[url:value = 'http://45.205.1.59/16466a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cd43f08-0b19-599b-a150-92dbdba6bd3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5a1b70",
      "pattern": "[url:value = 'http://45.205.1.59/5a1b70']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0d33da8-b8c2-598e-87db-c154a2c91bd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7afd8f",
      "pattern": "[url:value = 'http://45.205.1.59/7afd8f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94796df8-0bbb-539c-9a42-23d30f1be172",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/964d78",
      "pattern": "[url:value = 'http://45.205.1.59/964d78']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15dd9f3f-333c-5efd-9d49-b05065ffb75c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/v4b",
      "pattern": "[url:value = 'http://188.132.232.81/v4b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fc21b6a-3634-5ff0-b0a2-d802027dcf28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/gWe",
      "pattern": "[url:value = 'http://188.132.232.81/gWe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--964c5362-e690-5f5f-9582-1a47ea271746",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/uoc",
      "pattern": "[url:value = 'http://188.132.232.81/uoc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc2df1ef-da6d-5338-a9c7-108d459cb5d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/zHjh",
      "pattern": "[url:value = 'http://188.132.232.81/zHjh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fc4c55c-01c3-5993-8881-d9d6a167edf2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/tPa",
      "pattern": "[url:value = 'http://188.132.232.81/tPa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fa8384b-5672-5fdb-91e0-84f0788ab425",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/CEln",
      "pattern": "[url:value = 'http://188.132.232.81/CEln']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80b2aefe-7c4d-5100-94ac-9de1f519dcf4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/6987",
      "pattern": "[url:value = 'http://188.132.232.81/6987']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6df57af9-4528-51cd-9aaa-2f30e40b0a41",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Lqcy",
      "pattern": "[url:value = 'http://188.132.232.81/Lqcy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9949a60d-3eff-5f42-85c8-cd0389f90ced",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/HfQ",
      "pattern": "[url:value = 'http://188.132.232.81/HfQ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5670488b-b5e4-5b10-93c9-acdc878e870a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Guo",
      "pattern": "[url:value = 'http://188.132.232.81/Guo']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f91d094-43a5-5a4a-9868-59b6c4e129dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e0a338",
      "pattern": "[url:value = 'http://45.205.1.59/e0a338']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--094ae109-2a81-56b6-9da7-4ab40782b10b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/qYB",
      "pattern": "[url:value = 'http://188.132.232.81/qYB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71bb7ff1-f469-56bc-b38b-bb51ca572f59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c25933",
      "pattern": "[url:value = 'http://45.205.1.59/c25933']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6afc674e-0491-50dd-b3c5-51d3df9c3378",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cab2e5",
      "pattern": "[url:value = 'http://45.205.1.59/cab2e5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee2addda-4737-5f47-a297-33a56062ad3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/297a79",
      "pattern": "[url:value = 'http://45.205.1.59/297a79']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--297c1bef-e8f6-5887-a523-6a47b1460ecd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ae418a",
      "pattern": "[url:value = 'http://45.205.1.59/ae418a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a5e6d7d-f2e4-59bf-9e52-6f1b97941ca5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0cd571",
      "pattern": "[url:value = 'http://45.205.1.59/0cd571']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--151eeed1-c4b2-5a6d-935d-d5b1631362ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7f1fc5",
      "pattern": "[url:value = 'http://45.205.1.59/7f1fc5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be84b910-5a72-5284-979d-56a9e22e54e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/95d387",
      "pattern": "[url:value = 'http://45.205.1.59/95d387']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f006d27b-af3c-5203-b5dd-f1a609bb4224",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/add984",
      "pattern": "[url:value = 'http://45.205.1.59/add984']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7943e1c8-6f1d-572a-9d09-ddfea3f8ddba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d4a14f",
      "pattern": "[url:value = 'http://45.205.1.59/d4a14f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8a997a5-bc95-5819-8ef8-5d73345004a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/35754f",
      "pattern": "[url:value = 'http://45.205.1.59/35754f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a4bb5b3-8ea1-537e-b09c-0ba7e92957d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5e939d",
      "pattern": "[url:value = 'http://45.205.1.59/5e939d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c592d71f-e182-5061-8a2d-533ec8c62155",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/64afa1",
      "pattern": "[url:value = 'http://45.205.1.59/64afa1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd3273c8-610f-515e-bcdf-e9e2ed3cc348",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2d6571",
      "pattern": "[url:value = 'http://45.205.1.59/2d6571']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56449920-179f-5987-ae0d-a1986432df49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/544196",
      "pattern": "[url:value = 'http://45.205.1.59/544196']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--699a3318-51e4-5c0c-9fdd-49d57640a061",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e1502e",
      "pattern": "[url:value = 'http://45.205.1.59/e1502e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80eeea2c-3efb-55d2-b7b0-3534ed51ace2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/59iu",
      "pattern": "[url:value = 'http://188.132.232.81/59iu']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00199de5-c57b-5951-a0f4-55a057b266be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/QXXm",
      "pattern": "[url:value = 'http://188.132.232.81/QXXm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb9499c1-095d-59b7-85d9-6a23b7ae7d08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/owBy",
      "pattern": "[url:value = 'http://188.132.232.81/owBy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57ddb325-e018-5b0c-a3f1-965be853264e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/e1b",
      "pattern": "[url:value = 'http://188.132.232.81/e1b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f53862d-5dde-5c1f-be18-311a54b58cc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/WbvP",
      "pattern": "[url:value = 'http://188.132.232.81/WbvP']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:38:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88a5f643-5cd7-5baf-bee7-8d093217a1c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.151.182.131/k",
      "pattern": "[url:value = 'http://46.151.182.131/k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:37:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61116ca1-f375-5cb2-b574-523821bd7cc5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.151.182.131/mig",
      "pattern": "[url:value = 'http://46.151.182.131/mig']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:37:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c17e310c-848d-565c-9cde-2292f015ce04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://delte-mobrey.com/images/loner.exe",
      "pattern": "[url:value = 'https://delte-mobrey.com/images/loner.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:36:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2667bc20-b55e-57e9-8230-4b3ef822b37b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.142.209.35/bot",
      "pattern": "[url:value = 'http://83.142.209.35/bot']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d8940a5-be4b-5542-87fe-9690d401ab50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/mpsl",
      "pattern": "[url:value = 'http://64.89.161.140/bins/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f7de4bf-9947-58fa-9170-6e1746e3640f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/arm5",
      "pattern": "[url:value = 'http://64.89.161.140/bins/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86e0b39f-1bf5-5007-95ef-bfa43ee737f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/sh4",
      "pattern": "[url:value = 'http://64.89.161.140/bins/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67daeae2-95f4-5585-9a00-dca77387882d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/mips",
      "pattern": "[url:value = 'http://64.89.161.140/bins/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7560040-96fe-510d-93e5-a1a3e1a53f10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/x86",
      "pattern": "[url:value = 'http://64.89.161.140/bins/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--215f30fd-2b6c-59d0-82e3-4c26cf18a084",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/m68k",
      "pattern": "[url:value = 'http://64.89.161.140/bins/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a51d32b-c604-5b15-8924-dd9824b7de55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.103.213:39768/bin.sh",
      "pattern": "[url:value = 'http://110.37.103.213:39768/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b9d3506-f2fa-5c45-97ee-8fb837d01f0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/dbg",
      "pattern": "[url:value = 'http://64.89.161.140/bins/dbg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8773864-b8f2-59b4-95c1-034eb7ad95a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/spc",
      "pattern": "[url:value = 'http://64.89.161.140/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08fa723b-1c95-5310-995a-61690c3c486f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/arm",
      "pattern": "[url:value = 'http://64.89.161.140/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43459313-7905-559e-b14f-5fbe82eab43c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/i686",
      "pattern": "[url:value = 'http://64.89.161.140/bins/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53e94a09-4a3c-5925-8a66-8a77f6bf044d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/x86_64",
      "pattern": "[url:value = 'http://64.89.161.140/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34c65530-9110-5f84-997d-0c0395bec978",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/ppc",
      "pattern": "[url:value = 'http://64.89.161.140/bins/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f11a0b1-cd90-54b3-8fa4-ff30874e09dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.151.182.21/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://46.151.182.21/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d727fe80-135f-5cb9-80d5-8dbeae434663",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.131/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://64.89.161.131/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--282ea873-b0a8-5798-894c-496238563503",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.151.182.111/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://46.151.182.111/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c09854b-1e55-5653-a5d8-dcebb4ea6dd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.151.182.111/bin/support.client.exe",
      "pattern": "[url:value = 'http://46.151.182.111/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2351641-bc1b-5139-b7b6-d0dc0bc6d1b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.131/bin/support.client.exe",
      "pattern": "[url:value = 'http://64.89.161.131/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ad3a483-4566-5075-afa3-e28cf27449dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.151.182.21/bin/support.client.exe",
      "pattern": "[url:value = 'http://46.151.182.21/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bacf360e-8f08-58b3-a7ff-33697489437c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.161.140/bins/arm7",
      "pattern": "[url:value = 'http://64.89.161.140/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58a87473-e2b9-5a33-af7d-bad91edb4f1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.151.182.139/bin/support.client.exe",
      "pattern": "[url:value = 'http://46.151.182.139/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e530a0c-debc-5126-8376-ae17f3250913",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.163:38574/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.163:38574/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:26:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d379b1f-e171-50ef-8096-4a732f9aa5d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ikbnssq.persian.sex/68e88e56-2bf0-44c0-bcc7-a67c7f67fbe5",
      "pattern": "[url:value = 'https://ikbnssq.persian.sex/68e88e56-2bf0-44c0-bcc7-a67c7f67fbe5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb363f76-3253-5734-bef4-ba8abd0f81d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://0fqk0ho2.mrbet90.com/?ublib=1356cba2-f652-4725-9bbd-7613eb73acad",
      "pattern": "[url:value = 'https://0fqk0ho2.mrbet90.com/?ublib=1356cba2-f652-4725-9bbd-7613eb73acad']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:23:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a1a253b-24b1-53a0-824f-423ecd888179",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.118.132.61/exploit.sh",
      "pattern": "[url:value = 'http://64.118.132.61/exploit.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:20:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ba299b1-28a9-5e34-a124-4ba40b3f0024",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.54.110:33796/i",
      "pattern": "[url:value = 'http://115.55.54.110:33796/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:15:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a31e462-118f-506f-9bb0-ad4dbc8b896d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://t748i6is.volleyball.vip/?ublib=8276bb73-9f2b-436a-b772-ddd75e62ab36",
      "pattern": "[url:value = 'https://t748i6is.volleyball.vip/?ublib=8276bb73-9f2b-436a-b772-ddd75e62ab36']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:15:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--926de105-1d87-5243-bb25-db135bc09c36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zebswzz.one1xbet.net/f040cfda-acbd-4736-82ca-703afe65cb48",
      "pattern": "[url:value = 'https://zebswzz.one1xbet.net/f040cfda-acbd-4736-82ca-703afe65cb48']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd5d28c2-fce4-5b54-b10f-fa59e4200678",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.71.226:38983/bin.sh",
      "pattern": "[url:value = 'http://123.8.71.226:38983/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T17:01:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccf96edc-41ce-5f26-8b43-652995cfda24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.54.110:33796/bin.sh",
      "pattern": "[url:value = 'http://115.55.54.110:33796/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:53:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--435f668d-3a83-5907-b912-f9291d461a26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.170:32924/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.170:32924/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:51:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ba0d4e5-235b-55d3-ac31-b920d36cfeec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.207.125.194:60073/i",
      "pattern": "[url:value = 'http://27.207.125.194:60073/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:43:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55d1bfec-cc42-5651-a2c0-6ef9971acba5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://202.95.11.209/1.exe",
      "pattern": "[url:value = 'http://202.95.11.209/1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7185eac0-7df8-5bd5-9bdf-74e4b2436b1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://202.95.11.181/1.exe",
      "pattern": "[url:value = 'http://202.95.11.181/1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dabb829a-4fa9-5aad-af57-7950eb1dee90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://202.95.11.173/1.exe",
      "pattern": "[url:value = 'http://202.95.11.173/1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:41:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--854c2710-0b12-5f2c-ad51-171e7a57c595",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://flnntj.persianabet.casino/2a12a36d-9fe6-4c21-b683-f561b77eaf4c",
      "pattern": "[url:value = 'https://flnntj.persianabet.casino/2a12a36d-9fe6-4c21-b683-f561b77eaf4c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33eaa90c-d4b0-5701-b76c-e651dba53011",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.14.205.59:44334/i",
      "pattern": "[url:value = 'http://221.14.205.59:44334/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:31:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f79656e1-fd28-57d8-87bc-79c12a5b667b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.83.180:49395/i",
      "pattern": "[url:value = 'http://182.126.83.180:49395/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--722fb5b1-ed2e-566f-8b87-dfb421ad235f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://idwpuur.ninjafruitcubes.bet/66115c0a-2dbf-43d6-bceb-042fb60a3663",
      "pattern": "[url:value = 'https://idwpuur.ninjafruitcubes.bet/66115c0a-2dbf-43d6-bceb-042fb60a3663']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:27:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd0a23c5-1788-5c02-b0f8-421d3f356dc7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hfgzvf.perfectgameiran.com/4ea72eeb-793c-4d36-b9ef-a5056a389cb8",
      "pattern": "[url:value = 'https://hfgzvf.perfectgameiran.com/4ea72eeb-793c-4d36-b9ef-a5056a389cb8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:25:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--556d463a-9d2c-5cc6-aeef-c3564f9737bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://syheuby.mangobetfarsi.com/bb3e3aa2-ba39-4e8e-81e6-de566f08faf7",
      "pattern": "[url:value = 'https://syheuby.mangobetfarsi.com/bb3e3aa2-ba39-4e8e-81e6-de566f08faf7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9770f03-b998-536a-befb-5f51fbf5b6e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.238.26:56859/i",
      "pattern": "[url:value = 'http://110.39.238.26:56859/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:23:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--224c28df-d3ee-5d96-957e-b7b25b1f7f32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.127.30:33268/bin.sh",
      "pattern": "[url:value = 'http://182.126.127.30:33268/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--640e4a35-cf89-5963-8338-2d5e200908b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.75.14.107:46683/bin.sh",
      "pattern": "[url:value = 'http://39.75.14.107:46683/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T16:00:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6bbe95b-5e4e-5157-9592-0a86b9794db8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.100.188:54136/i",
      "pattern": "[url:value = 'http://222.138.100.188:54136/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:56:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb2a81b7-7fad-57cd-b077-b2f8138d064a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.238.26:56859/bin.sh",
      "pattern": "[url:value = 'http://110.39.238.26:56859/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9823420b-9d18-5c90-9829-1ee4ae40719c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imagey973.png",
      "pattern": "[url:value = 'https://everycarebd.com/imagey973.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cde7dc8e-e1aa-5055-bccc-4abda95ebd46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/speachhouse.exe",
      "pattern": "[url:value = 'https://everycarebd.com/speachhouse.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84019e82-d7e8-5a91-b349-88c37707dc59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imageps293.png",
      "pattern": "[url:value = 'https://everycarebd.com/imageps293.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41b0c17c-9837-57c5-b733-7d15cab39309",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/Clientmmmmmmmmmm.exe",
      "pattern": "[url:value = 'https://everycarebd.com/Clientmmmmmmmmmm.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad7feb2d-0a73-523f-a41f-eb44b34f8a31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imageiiiii88.png",
      "pattern": "[url:value = 'https://everycarebd.com/imageiiiii88.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12358c82-03ae-5c43-b248-f673fd515211",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imagenyueteuppol45.png",
      "pattern": "[url:value = 'https://everycarebd.com/imagenyueteuppol45.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05948bec-7932-56f2-b142-f56b40cd5ed4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/sallah.exe",
      "pattern": "[url:value = 'https://everycarebd.com/sallah.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55c58ba3-ce70-573f-a419-8fa206218edf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/Clientmay.exe",
      "pattern": "[url:value = 'https://everycarebd.com/Clientmay.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf050b12-76de-5963-97af-71be62bd468e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/67890.exe",
      "pattern": "[url:value = 'https://everycarebd.com/67890.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec1648c1-9c2c-5663-8794-9e59db8a8092",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imageqqqqqq111.png",
      "pattern": "[url:value = 'https://everycarebd.com/imageqqqqqq111.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c870b3df-1bd0-52eb-88bf-2d8b03f4ef78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/ijklmnopqrxtu.exe",
      "pattern": "[url:value = 'https://everycarebd.com/ijklmnopqrxtu.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3663250-a899-5b12-a477-448b3e084859",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imagelouyytr09009.png",
      "pattern": "[url:value = 'https://everycarebd.com/imagelouyytr09009.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc0d2711-4f43-5d7b-a74a-4a1b58087da6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imagethur3.png",
      "pattern": "[url:value = 'https://everycarebd.com/imagethur3.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a50db58-81f1-5bd8-9c96-2c09aef6f948",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/0982.exe",
      "pattern": "[url:value = 'https://everycarebd.com/0982.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e2c92fc-0a20-545e-9739-e6e79306e460",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/Clientmmmmiiii.exe",
      "pattern": "[url:value = 'https://everycarebd.com/Clientmmmmiiii.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c20c163-2e20-5c71-b8ac-20e88b509eb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/kkkkkkkksieopelloptrf.exe",
      "pattern": "[url:value = 'https://everycarebd.com/kkkkkkkksieopelloptrf.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b738e74-bb4b-54f7-9440-b550af54477a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imagevvvvvv980.png",
      "pattern": "[url:value = 'https://everycarebd.com/imagevvvvvv980.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c948eda-12a2-5877-a9d3-43a2bbaadd43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/sddilo.exe",
      "pattern": "[url:value = 'https://everycarebd.com/sddilo.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bb0cdb5-b653-5f8d-904e-b2edcee87f48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/imagelophg09876.png",
      "pattern": "[url:value = 'https://everycarebd.com/imagelophg09876.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba871f0d-de4f-550d-934a-ee903cc8d2ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/venumol0985.png",
      "pattern": "[url:value = 'https://everycarebd.com/venumol0985.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33682b81-8006-5fd6-aa3f-e0e0c92ac54b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/123456789.exe",
      "pattern": "[url:value = 'https://everycarebd.com/123456789.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d150d12-7cb8-5c68-a3bc-dbf2c4d5c497",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/image445.png",
      "pattern": "[url:value = 'https://everycarebd.com/image445.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:52:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77aca590-2a4a-5df7-b28a-1aa35b2d5b86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qcqsin.yasbet90.com/e21aca47-59ac-437a-a23f-f0fc4160d501",
      "pattern": "[url:value = 'https://qcqsin.yasbet90.com/e21aca47-59ac-437a-a23f-f0fc4160d501']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0bc3f62-6171-5bed-87c0-89a7f4244aa8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vvpfsda.pasoor11.bet/779f2e95-ee00-4fbe-8b49-4e80c5c74cc4",
      "pattern": "[url:value = 'https://vvpfsda.pasoor11.bet/779f2e95-ee00-4fbe-8b49-4e80c5c74cc4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9964da9c-5c7d-5f29-9d7a-3acbe89827c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/2222.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/2222.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:40:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ed2d349-1850-5dbb-a01d-0429dbb2f172",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.176.23:43509/i",
      "pattern": "[url:value = 'http://182.126.176.23:43509/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a8cb3b4-fa32-5d83-a42c-66637c4652e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.176.23:43509/bin.sh",
      "pattern": "[url:value = 'http://182.126.176.23:43509/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:32:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--563527bd-3b95-5d34-a474-71b8fa1c33a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://e20yl90d.parsgoal90.com/?ublib=efc0003a-2c59-4502-ac39-96e3ff533e46",
      "pattern": "[url:value = 'https://e20yl90d.parsgoal90.com/?ublib=efc0003a-2c59-4502-ac39-96e3ff533e46']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:21:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1cdcb11-ed22-5de4-b164-22da979d31bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zjuflao.pasur21.com/4a60ef59-fce6-4a92-bab6-3049e1d95698",
      "pattern": "[url:value = 'https://zjuflao.pasur21.com/4a60ef59-fce6-4a92-bab6-3049e1d95698']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:20:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861080/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--208adf8c-0e87-5c91-bed2-cc5637fd58aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.170:32924/i",
      "pattern": "[url:value = 'http://110.36.80.170:32924/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:18:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861079/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1d61947-8eac-5c4d-ad8e-90c7d89d90ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.189.147.14:40588/bin.sh",
      "pattern": "[url:value = 'http://119.189.147.14:40588/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:15:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861078/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7de5a104-4afe-5dc8-a934-d6254c565594",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.141.50:59154/i",
      "pattern": "[url:value = 'http://125.41.141.50:59154/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:08:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861077/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24347a8c-cedf-5dcc-890f-c92e96bd2d68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://77.236.74.65:53870/i",
      "pattern": "[url:value = 'http://77.236.74.65:53870/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:07:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861076/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f6cbbbe-29ea-595e-9617-d6d748e315bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://162.255.251.91:42469/bin.sh",
      "pattern": "[url:value = 'http://162.255.251.91:42469/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:05:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861075/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de4b3b64-982e-51ed-a182-77d3eefb92e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.238.99.200:50128/i",
      "pattern": "[url:value = 'http://42.238.99.200:50128/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T15:04:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861074/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbcb4d06-fc47-50a5-aa5c-ec55a6e8fc58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.238.99.200:50128/bin.sh",
      "pattern": "[url:value = 'http://42.238.99.200:50128/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:59:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861073/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e779f7f-0e79-58db-8c28-33808ce70e9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.141.50:59154/bin.sh",
      "pattern": "[url:value = 'http://125.41.141.50:59154/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:57:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861072/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bad0b53d-387f-52f1-9274-e17695868394",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.225.163.226:51068/i",
      "pattern": "[url:value = 'http://91.225.163.226:51068/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:50:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861071/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70c70a72-07b9-5e80-b7b7-bbb3b9d58cbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://77.236.74.65:53870/bin.sh",
      "pattern": "[url:value = 'http://77.236.74.65:53870/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861070/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dadcab71-a62f-5c99-b807-76dac7c998a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.rywh1405.com/snaxh",
      "pattern": "[url:value = 'https://www.rywh1405.com/snaxh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861068/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--447ed2e9-3197-581b-99b9-a748401b749d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.rywh1405.com/ugfsa",
      "pattern": "[url:value = 'https://www.rywh1405.com/ugfsa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861069/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec55a1e0-91b7-5a68-a34d-2b6fb68cedbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.9.106/oHyRjYB7.bin",
      "pattern": "[url:value = 'http://185.29.9.106/oHyRjYB7.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861066/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c9e8d3a-6dae-5ea9-8904-87a6acd0029b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.9.106/jYqUn174.bin",
      "pattern": "[url:value = 'http://185.29.9.106/jYqUn174.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861067/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e16cc5c-7d89-52af-a591-e733ad971041",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.9.106/caYWoyq34.bin",
      "pattern": "[url:value = 'http://185.29.9.106/caYWoyq34.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861061/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5166a6bf-b010-5611-9f2f-72b0a70b3bd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.9.106/CTbqK122.bin",
      "pattern": "[url:value = 'http://185.29.9.106/CTbqK122.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861062/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e5d78ea-c3ba-51e9-9085-94224350347b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.9.106/IkaXSiJy190.bin",
      "pattern": "[url:value = 'http://185.29.9.106/IkaXSiJy190.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861063/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec9308a9-2c56-5539-98a7-2f65377b2d15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.9.106/VVLUMCUutxUzaYmYt104.bin",
      "pattern": "[url:value = 'http://185.29.9.106/VVLUMCUutxUzaYmYt104.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861064/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--158e7145-defa-5aa2-87f7-6a51c84d37ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://queendent.hu/kkostvstem/dwbfxgKfGvIcJS220.bin",
      "pattern": "[url:value = 'http://queendent.hu/kkostvstem/dwbfxgKfGvIcJS220.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861065/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47aa2758-172b-5f9a-893d-3833681e09b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://maplecirrus.com/curl/05523c8231cb3b01d6554123a1c994aa09ef6c8e4e0804d3ae8bfaa028aa0db9",
      "pattern": "[url:value = 'https://maplecirrus.com/curl/05523c8231cb3b01d6554123a1c994aa09ef6c8e4e0804d3ae8bfaa028aa0db9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861059/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d47f92af-7e72-552c-990e-c7d25053579d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://maplecirrus.com/curl/*",
      "pattern": "[url:value = 'https://maplecirrus.com/curl/*']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861060/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7caa8153-e3a1-528b-9815-37f5426907b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.53.78:35791/bin.sh",
      "pattern": "[url:value = 'http://39.74.53.78:35791/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:44:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861058/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--460dd71b-2133-5e89-90a9-85a257ddba91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.248.117:53826/bin.sh",
      "pattern": "[url:value = 'http://110.39.248.117:53826/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:43:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861057/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bd18ee8-9857-52c0-ac19-754677995919",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.227.95:56356/i",
      "pattern": "[url:value = 'http://115.55.227.95:56356/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:42:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861056/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ac3e366-bd1a-5331-9901-fbd28af5d5f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.249.84:38098/bin.sh",
      "pattern": "[url:value = 'http://182.126.249.84:38098/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:41:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861055/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b72e437a-63ac-5dfc-864d-1b32bf9d80b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://fporlgd.penality.bet/4cbe007e-adef-4c6a-b021-3ecce9e89451",
      "pattern": "[url:value = 'https://fporlgd.penality.bet/4cbe007e-adef-4c6a-b021-3ecce9e89451']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861054/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e57aed75-e0f2-53a0-b8ff-6ef32d378496",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.212.28:50409/i",
      "pattern": "[url:value = 'http://182.113.212.28:50409/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:10:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861053/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ef06a34-73b1-5093-8e51-d5840fc84b51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.12.8:58364/bin.sh",
      "pattern": "[url:value = 'http://110.37.12.8:58364/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:08:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861052/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e0ae00-1b49-535f-acda-b269fa5ef0e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.227.95:56356/bin.sh",
      "pattern": "[url:value = 'http://115.55.227.95:56356/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:08:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861051/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9135eee3-0a36-5a8d-9931-30939de364c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.82.69:58121/bin.sh",
      "pattern": "[url:value = 'http://27.215.82.69:58121/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:06:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861050/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89966340-7a0a-51f8-99f7-88ec1bfebff1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.244.159:34986/i",
      "pattern": "[url:value = 'http://123.9.244.159:34986/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861049/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aac5f228-7aa4-5eb5-b7d4-7f07d9be0136",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.74.148:49406/i",
      "pattern": "[url:value = 'http://110.36.74.148:49406/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861048/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58fe84a5-00e3-50fa-9ee4-ec2d8988400b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.182.57:39547/i",
      "pattern": "[url:value = 'http://27.215.182.57:39547/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:00:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861047/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63a23d4f-1d23-5b2a-8698-59b45b07b2cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vdchddh.penaltibazi.com/a0d634ec-ba2f-4f72-bfbb-6fdc6d606539",
      "pattern": "[url:value = 'https://vdchddh.penaltibazi.com/a0d634ec-ba2f-4f72-bfbb-6fdc6d606539']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T14:00:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861046/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9a823c8-c908-5509-a835-2d5920300822",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.225.163.226:51068/bin.sh",
      "pattern": "[url:value = 'http://91.225.163.226:51068/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:56:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861045/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78cad572-4efd-5d88-b919-cf6284f5c605",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://143.92.48.9/2023",
      "pattern": "[url:value = 'https://143.92.48.9/2023']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:53:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861042/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c13e4cd-d881-5e4a-baea-b18b1bd52dab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://143.92.48.33/2023",
      "pattern": "[url:value = 'https://143.92.48.33/2023']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:53:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861043/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18bc9e96-d568-5636-bec8-bfd0872d98da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://143.92.48.16/2023",
      "pattern": "[url:value = 'https://143.92.48.16/2023']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:53:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861044/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7e29e36-c2f8-56f4-b68e-55f60bc203de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.212.28:50409/bin.sh",
      "pattern": "[url:value = 'http://182.113.212.28:50409/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:51:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861041/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3490af1-6175-5b0c-b92d-6d2d18a3fb5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://109.165.71.86:42014/i",
      "pattern": "[url:value = 'http://109.165.71.86:42014/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:49:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861040/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1d0edc8-b0dc-56ad-a610-936ee2effbc8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xhfecr.jamjahani2026.football/9252ba41-d395-42e4-af91-93fb55481368",
      "pattern": "[url:value = 'https://xhfecr.jamjahani2026.football/9252ba41-d395-42e4-af91-93fb55481368']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:48:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861039/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b12fba2-dd65-56ae-9919-e30b1cbf94ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.27.41:50193/i",
      "pattern": "[url:value = 'http://182.127.27.41:50193/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:40:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861038/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa7848e0-f7c0-56d6-acf4-58d3d95540b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jwfckz.onlineshart.com/cc99dc58-2285-457d-b424-d8d8b49426d4",
      "pattern": "[url:value = 'https://jwfckz.onlineshart.com/cc99dc58-2285-457d-b424-d8d8b49426d4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:35:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861037/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0de313fb-c635-5451-9cd5-14d041f85b5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://111.220.66.152:33532/i",
      "pattern": "[url:value = 'http://111.220.66.152:33532/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:34:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861036/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7c4eb4a-bd41-5f10-afdf-6129492acc74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.59.113:60153/i",
      "pattern": "[url:value = 'http://110.37.59.113:60153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:33:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861035/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f88bfbd6-db81-5836-85d4-42230d69e8a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.182.57:39547/bin.sh",
      "pattern": "[url:value = 'http://27.215.182.57:39547/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:33:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861034/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40a5efb5-988a-5464-8e6a-f5971cf7fcc0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/807/greatnessideadsbeomcebestthingsforme.hta",
      "pattern": "[url:value = 'http://107.173.9.85/807/greatnessideadsbeomcebestthingsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:29:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861033/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef00ac2d-31cd-5a0a-9923-56cfc86fe03f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/807/vzt_222216.cat",
      "pattern": "[url:value = 'http://107.173.9.85/807/vzt_222216.cat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:29:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861030/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d4e39da-c2af-5cc2-903e-7991e3cfc4cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.173.9.85/httpswww.pcmag.compicksthe-best-cloud-storage-and-file-sharing-servicestest_uuid=05ZUPUtSJIjL9ET37tWfQcl&test_variant=AOS.php",
      "pattern": "[url:value = 'http://107.173.9.85/httpswww.pcmag.compicksthe-best-cloud-storage-and-file-sharing-servicestest_uuid=05ZUPUtSJIjL9ET37tWfQcl&test_variant=AOS.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:29:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861031/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7687b4e7-46e4-5f05-b1ee-c257dda1fae7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://oczvda.oxidbet.bet/520ee948-b1eb-48fe-a5c0-2cc2cce6661e",
      "pattern": "[url:value = 'https://oczvda.oxidbet.bet/520ee948-b1eb-48fe-a5c0-2cc2cce6661e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:29:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861032/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef988e90-7682-5579-8c00-e35ec3b64938",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://109.165.71.86:42014/bin.sh",
      "pattern": "[url:value = 'http://109.165.71.86:42014/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861029/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ccf8534-72f5-5064-a494-c58dbe1e8965",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jjgnawd.penalti.website/ba38d225-c05c-4c9b-bf1c-7c46250643c2",
      "pattern": "[url:value = 'https://jjgnawd.penalti.website/ba38d225-c05c-4c9b-bf1c-7c46250643c2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861027/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee1da753-d7d8-587a-9c2c-84bc6bbea361",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://te3znaut.parspoker90.com/?ublib=8a52ab47-39f1-4faf-819f-b54cd115ac56",
      "pattern": "[url:value = 'https://te3znaut.parspoker90.com/?ublib=8a52ab47-39f1-4faf-819f-b54cd115ac56']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861028/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e71e79e-54f9-5cae-9196-4c62d371c474",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hknnbq.pablobet90.com/fcf63cb7-ac1e-4788-ae35-e523551b6180",
      "pattern": "[url:value = 'https://hknnbq.pablobet90.com/fcf63cb7-ac1e-4788-ae35-e523551b6180']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:21:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861026/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33afcdfc-44a1-5f9c-8dcb-1252cbb00d52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.59.113:60153/bin.sh",
      "pattern": "[url:value = 'http://110.37.59.113:60153/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:13:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861025/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d60b7751-3b44-58dd-bae6-8e608430e78c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.75.127:57045/bin.sh",
      "pattern": "[url:value = 'http://61.52.75.127:57045/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:11:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861024/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3aa6b8ee-67be-529e-8347-a5eab7ae5471",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://178.16.54.109/xx.exe",
      "pattern": "[url:value = 'http://178.16.54.109/xx.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:11:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861023/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ad8112c-9675-5ded-9ac2-858d9c591e28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.117.161:34820/i",
      "pattern": "[url:value = 'http://125.42.117.161:34820/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:09:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861022/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40344094-cf70-568d-a61b-edaa5c32858f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.30.184:40326/i",
      "pattern": "[url:value = 'http://110.36.30.184:40326/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T13:05:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861021/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30a7260a-2f7a-5d1e-85ee-529092de907f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.190.134.254:56689/i",
      "pattern": "[url:value = 'http://117.190.134.254:56689/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:56:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861020/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd61e124-7789-5501-8166-37ade659a82f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.252.184:40584/i",
      "pattern": "[url:value = 'http://123.4.252.184:40584/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:54:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861019/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--393f0de5-7167-542a-8f28-159dc56d995b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.194.227.46:56396/i",
      "pattern": "[url:value = 'http://72.194.227.46:56396/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:40:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861018/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--609d0b24-ac88-5e73-9aff-f7f30cd8d16e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.190.134.254:56689/bin.sh",
      "pattern": "[url:value = 'http://117.190.134.254:56689/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:25:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861017/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bab91c8f-257c-5ac4-83bc-fdee6b22af76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.194.227.46:56396/bin.sh",
      "pattern": "[url:value = 'http://72.194.227.46:56396/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:23:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861016/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5309c45b-afd1-5160-a71f-b8c1ccc4896e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.46.196.74:37618/i",
      "pattern": "[url:value = 'http://125.46.196.74:37618/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:23:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861015/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb88c20b-379d-5e54-8b67-85f4dd9e2ab5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.252.184:40584/bin.sh",
      "pattern": "[url:value = 'http://123.4.252.184:40584/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:19:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861014/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--579bd3db-d15a-52a3-bb19-747ebc4dcba6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.28.45:34482/i",
      "pattern": "[url:value = 'http://110.36.28.45:34482/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861012/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51e4fc4a-49d7-5b18-b834-8281287f6d21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.79.143.42:36614/bin.sh",
      "pattern": "[url:value = 'http://39.79.143.42:36614/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861013/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7942492-03d7-5a7b-b1f2-943ef2ee280e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.189.147.14:40588/i",
      "pattern": "[url:value = 'http://119.189.147.14:40588/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:06:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861011/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7299e9b-2e3c-5a9e-a550-f02db205bf49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.30.184:40326/bin.sh",
      "pattern": "[url:value = 'http://110.36.30.184:40326/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861010/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3a0d272-e61b-51d9-aa4f-51cd73a279c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.233.249:47494/i",
      "pattern": "[url:value = 'http://125.42.233.249:47494/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:02:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861009/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b16d734d-f497-5b39-8462-ab8464939906",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.205.210:56254/i",
      "pattern": "[url:value = 'http://182.113.205.210:56254/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861007/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--930270df-c413-5efb-b93e-3ef9fccaf94a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://h0t75jy5.betgopro.com/?ublib=920cb201-2ae4-4839-b5d0-6fb4fbaa05e9",
      "pattern": "[url:value = 'https://h0t75jy5.betgopro.com/?ublib=920cb201-2ae4-4839-b5d0-6fb4fbaa05e9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T12:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861008/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddba45ea-da49-5d52-acfc-1705b67e170b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.46.196.74:37618/bin.sh",
      "pattern": "[url:value = 'http://125.46.196.74:37618/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:57:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861006/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf6f3e55-009a-5cef-8bed-6dac06ee18d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.53.25:54005/bin.sh",
      "pattern": "[url:value = 'http://110.37.53.25:54005/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861005/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b56eb73-72e3-535a-afd8-4de3fe952d99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zrqkapj.one1x.bet/ebe30608-c8df-49ff-8bfd-ec2809737296",
      "pattern": "[url:value = 'https://zrqkapj.one1x.bet/ebe30608-c8df-49ff-8bfd-ec2809737296']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:51:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861004/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cffa1647-dfce-53b0-9f30-3f6e07b1dc99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.28.45:34482/bin.sh",
      "pattern": "[url:value = 'http://110.36.28.45:34482/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:51:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861003/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61767021-eb65-504d-88c5-b1c0cb2c0fba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.121.13:49408/i",
      "pattern": "[url:value = 'http://182.119.121.13:49408/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861002/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abfbaf70-77a8-59f9-9eab-6fd5f435ed94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.205.210:56254/bin.sh",
      "pattern": "[url:value = 'http://182.113.205.210:56254/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861001/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41da37e9-6b1a-5434-bb15-937974410bad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.121.13:49408/bin.sh",
      "pattern": "[url:value = 'http://182.119.121.13:49408/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3861000/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c4c3f9a-fff7-581a-9722-ad1e306249dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.162.140:35747/i",
      "pattern": "[url:value = 'http://222.134.162.140:35747/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:36:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860999/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--194bb0b2-fda4-5158-bc8d-123632b89db3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.174.123.246:45680/i",
      "pattern": "[url:value = 'http://175.174.123.246:45680/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:27:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860998/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--923b077a-040f-5158-905b-4c6618b34c38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.93.182:53160/i",
      "pattern": "[url:value = 'http://110.36.93.182:53160/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860997/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bc0c813-8fa3-5ae2-ae34-e3d9b42c27cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.233.249:47494/bin.sh",
      "pattern": "[url:value = 'http://125.42.233.249:47494/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:24:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860996/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--005f74ed-6d96-567c-b333-7bde3cb9b43b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://fhvteyb.kbshavanese.com/453fd1b9-97d7-4d99-b058-671b586b5f0f",
      "pattern": "[url:value = 'https://fhvteyb.kbshavanese.com/453fd1b9-97d7-4d99-b058-671b586b5f0f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:16:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860995/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bc90239-c245-5d8c-85f7-f44fe0f9aacb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.162.140:35747/bin.sh",
      "pattern": "[url:value = 'http://222.134.162.140:35747/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:13:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860994/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a843511e-daf6-5287-bbcd-7b4dc5a72f23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.41.106:44324/i",
      "pattern": "[url:value = 'http://39.74.41.106:44324/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:12:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860993/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a1cef0f-a051-5a37-84c8-acca6f948a02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.213.121.130/1.exe",
      "pattern": "[url:value = 'http://112.213.121.130/1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T11:04:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860992/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df5ca348-a74d-5d90-bd93-b1c3a6796057",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/i686",
      "pattern": "[url:value = 'http://38.76.198.108/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:58:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860991/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--653bf18c-d00d-5fd3-93a4-70460e79e61e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/x86_64",
      "pattern": "[url:value = 'http://38.76.198.108/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:57:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860990/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37b70c09-3a2b-5f55-8000-fb31f56eea81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/arm7",
      "pattern": "[url:value = 'http://38.76.198.108/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860989/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34fb0ff5-efab-5000-a885-5dd75a26f6f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/download.sh",
      "pattern": "[url:value = 'http://38.76.198.108/download.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860980/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c252a09-c919-55f2-8b57-00628702f8b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/mips",
      "pattern": "[url:value = 'http://38.76.198.108/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860981/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e171daf-3c4b-52f1-b0b9-bd1587479063",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/mipsel",
      "pattern": "[url:value = 'http://38.76.198.108/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860982/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe06c8ac-2000-59b0-ae94-0913df655e7f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/arc",
      "pattern": "[url:value = 'http://38.76.198.108/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860983/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6ef63da-ba74-5c4a-a094-11129703de32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/arm",
      "pattern": "[url:value = 'http://38.76.198.108/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860984/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2210fc5c-d94b-5dfa-9fbd-7004d6736880",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/arm5",
      "pattern": "[url:value = 'http://38.76.198.108/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860985/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--307e4a49-6f0a-5e06-aa0d-cdf91b8d64db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/i586",
      "pattern": "[url:value = 'http://38.76.198.108/i586']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860986/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8a263e2-01f8-5de8-a612-834a76248da9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/sh4",
      "pattern": "[url:value = 'http://38.76.198.108/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860987/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad0d7d20-21ee-596f-92f9-ce28976bce03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.198.108/arm6",
      "pattern": "[url:value = 'http://38.76.198.108/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860988/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be6c3a96-8443-57b4-9cd3-e64a910ea4b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cebsrg.jamjahani.football/aa7caee1-668a-417e-9ecf-529cfdd77aa9",
      "pattern": "[url:value = 'https://cebsrg.jamjahani.football/aa7caee1-668a-417e-9ecf-529cfdd77aa9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860979/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--460c336a-11c2-5b1e-9d97-de80e607fbed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://118.34.109.121:55534/i",
      "pattern": "[url:value = 'http://118.34.109.121:55534/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860978/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e2dc059-ca11-500d-a159-594aca30f80c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.174.123.246:45680/bin.sh",
      "pattern": "[url:value = 'http://175.174.123.246:45680/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:34:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860977/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bcb9b33-7a4e-52d3-9bc7-8bfd001cba6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gwu729hw.parspoker.casino/?ublib=c15e84fb-3a94-463e-81db-dc92976775a8",
      "pattern": "[url:value = 'https://gwu729hw.parspoker.casino/?ublib=c15e84fb-3a94-463e-81db-dc92976775a8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:33:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860976/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9350dd25-12f8-5e5d-977c-b6ef183f2348",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hjwaxur.kvbel.com/ef24e2b2-6a69-4827-a2c8-1ecd9345b556",
      "pattern": "[url:value = 'https://hjwaxur.kvbel.com/ef24e2b2-6a69-4827-a2c8-1ecd9345b556']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:33:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860975/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68abd850-08a1-5a65-891a-45356edf6da8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://141.98.10.98/nc64.exe",
      "pattern": "[url:value = 'http://141.98.10.98/nc64.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:29:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860973/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbcc281b-3540-5a3e-9d15-7bf9ce7177a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://141.98.10.98/PrintSpoofer64.exe",
      "pattern": "[url:value = 'http://141.98.10.98/PrintSpoofer64.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:29:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860974/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6410de44-50d8-595e-bf78-b2ace0285f43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.206.225.139:38203/i",
      "pattern": "[url:value = 'http://27.206.225.139:38203/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860972/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0920a07-b65e-5e48-a6ee-11a79bc57697",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.0.223:48251/i",
      "pattern": "[url:value = 'http://182.112.0.223:48251/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T10:02:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860971/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac3971d1-9221-58cc-80c2-692469a43e07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://inmjycz.olabahiskayit.com/df026e27-a7a1-4d3f-b289-e42b25ed4c1c",
      "pattern": "[url:value = 'https://inmjycz.olabahiskayit.com/df026e27-a7a1-4d3f-b289-e42b25ed4c1c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:55:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860970/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49647b6c-2ba3-541d-8e3b-34ae794d71cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://108.168.0.60:51495/i",
      "pattern": "[url:value = 'http://108.168.0.60:51495/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:50:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860969/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19e19a6d-c53d-5217-8173-b013a0cbe917",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.206.225.139:38203/bin.sh",
      "pattern": "[url:value = 'http://27.206.225.139:38203/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:49:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860968/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d4181ab-9d6e-5041-b104-19ad8ade2c02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/Favour1.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/Favour1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:46:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860967/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f354dba-e7a1-50c1-8973-0f78a69d115a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rykwhjt.winsportiran.com/bfc31803-6e1c-4ce6-a99f-44c75d4c0e0c",
      "pattern": "[url:value = 'https://rykwhjt.winsportiran.com/bfc31803-6e1c-4ce6-a99f-44c75d4c0e0c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860966/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6ab42b4-941a-5a68-9aa3-03bd4e662999",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/Doppee12.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/Doppee12.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:41:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860965/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aeace397-2d5c-5449-92ac-d23af819f8ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tviyhdt.winstone.casino/b40ac294-23e4-4e6a-a8de-1be679dcd172",
      "pattern": "[url:value = 'https://tviyhdt.winstone.casino/b40ac294-23e4-4e6a-a8de-1be679dcd172']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:39:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860964/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae78259b-576e-5ed9-bffa-089c126de0ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.63.39.65:34775/i",
      "pattern": "[url:value = 'http://115.63.39.65:34775/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:28:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860963/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4038b9b0-59b3-587b-bb83-27e08d3c2ada",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://108.168.0.60:51495/bin.sh",
      "pattern": "[url:value = 'http://108.168.0.60:51495/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:25:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860962/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33235172-8ce4-522f-b011-f30423233dd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.14.156:41157/i",
      "pattern": "[url:value = 'http://110.37.14.156:41157/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:24:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860961/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d838c7f-c0ad-5c79-b859-e0b27c709c4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/zHcAHnmc228.bin",
      "pattern": "[url:value = 'http://185.29.10.125/zHcAHnmc228.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860960/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--117b1d03-c14a-5cd2-ba61-ebfcaff864a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.194.145:42924/i",
      "pattern": "[url:value = 'http://123.12.194.145:42924/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860959/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0cb55d1-e064-5344-a4c6-8854743dfa3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/nDgivqAAjMmygNYgNplciP95.bin",
      "pattern": "[url:value = 'http://185.29.10.125/nDgivqAAjMmygNYgNplciP95.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860951/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8603d217-5046-5e63-a14a-d6a8f5147576",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/JnyxvLpARPmw60.bin",
      "pattern": "[url:value = 'http://185.29.10.125/JnyxvLpARPmw60.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860952/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb3222ca-bc09-54f9-8d7a-0371e1e9e0d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/wjtfTSA232.bin",
      "pattern": "[url:value = 'http://185.29.10.125/wjtfTSA232.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860953/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87aad192-521f-5d2b-90d5-b338ae899ee1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/RqPFF187.bin",
      "pattern": "[url:value = 'http://185.29.10.125/RqPFF187.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860954/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fec26537-db84-5fa6-a3be-c43748a6cd6d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/ThJlITBRIDCKzZO222.bin",
      "pattern": "[url:value = 'http://185.29.10.125/ThJlITBRIDCKzZO222.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860955/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aae4876-7ada-506d-8a41-a99f03af3831",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/CTRQllfxs160.bin",
      "pattern": "[url:value = 'http://185.29.10.125/CTRQllfxs160.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860956/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91965470-f1e3-5787-9ff2-3f65133efc28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/DISioRFsKNBVqpXJgO26.bin",
      "pattern": "[url:value = 'http://185.29.10.125/DISioRFsKNBVqpXJgO26.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860957/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36640a2d-4a71-59ae-b9dd-dca5518aea69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/MrbhdJjpcOenoOa195.bin",
      "pattern": "[url:value = 'http://185.29.10.125/MrbhdJjpcOenoOa195.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860958/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d79efa8-0e42-58ea-be89-b60d40feb577",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.29.10.125/jgjcsQLTH184.bin",
      "pattern": "[url:value = 'http://185.29.10.125/jgjcsQLTH184.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:16:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860950/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b68185e-60e9-5f81-bff8-cb80bd943d9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://store-eu-par-3.gofile.io/download/direct/baa0ac54-9c64-452e-88bb-a04605b8661a/pressvoice.zip",
      "pattern": "[url:value = 'https://store-eu-par-3.gofile.io/download/direct/baa0ac54-9c64-452e-88bb-a04605b8661a/pressvoice.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:11:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860949/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9412b605-329c-5768-8aaf-616b132e1a06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.248.221:33001/i",
      "pattern": "[url:value = 'http://119.179.248.221:33001/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:06:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860948/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4ea7ada-5675-505f-945f-a029a3019485",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.0.223:48251/bin.sh",
      "pattern": "[url:value = 'http://182.112.0.223:48251/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:05:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860947/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1684da3-378a-53f7-a9b5-daec295e9e30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.76.210.124/fscan",
      "pattern": "[url:value = 'http://38.76.210.124/fscan']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:03:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860946/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dce5600a-ad88-5bf3-9008-14c278e520c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.63.39.65:34775/bin.sh",
      "pattern": "[url:value = 'http://115.63.39.65:34775/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:00:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860945/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1315dd80-426b-56d4-badb-71b35a8bf5f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mpozwop.winxbet.co/8763c313-35b0-4c78-95e5-df131c5a0d33",
      "pattern": "[url:value = 'https://mpozwop.winxbet.co/8763c313-35b0-4c78-95e5-df131c5a0d33']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T09:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860944/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae58792f-8279-5de6-85dd-67b46552cee5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.247.209:50912/i",
      "pattern": "[url:value = 'http://110.39.247.209:50912/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:55:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860943/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--496862ea-24ab-5566-a684-57d876ecdf6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xzelng.jamjahani.cash/f160ba90-fb05-4bee-bd55-63470f0efe0d",
      "pattern": "[url:value = 'https://xzelng.jamjahani.cash/f160ba90-fb05-4bee-bd55-63470f0efe0d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:55:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860942/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e62e9217-e1c6-5e22-a04b-5aad45e17ead",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.247.209:50912/bin.sh",
      "pattern": "[url:value = 'http://110.39.247.209:50912/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860941/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c17b9ec8-b83e-52f1-9ec7-87f6960252d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://114.198.242.174:49905/i",
      "pattern": "[url:value = 'http://114.198.242.174:49905/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:51:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860940/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74dae4e5-b657-5c60-859b-727a0e7db0ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://yynpur.perfectgame.casino/b39422c8-1821-4984-b46b-0c9c843a9ddc",
      "pattern": "[url:value = 'https://yynpur.perfectgame.casino/b39422c8-1821-4984-b46b-0c9c843a9ddc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860939/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04c3ef52-429f-58a4-84c9-6a07c4c28c0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.156.114.173:54627/i",
      "pattern": "[url:value = 'http://219.156.114.173:54627/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:43:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860938/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--358cb950-cbee-579e-a37e-8c662621e5b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.248.221:33001/bin.sh",
      "pattern": "[url:value = 'http://119.179.248.221:33001/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:40:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860937/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa89c55b-f2c2-5642-8aec-c0e335ecac64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://156.238.236.16/fscan",
      "pattern": "[url:value = 'http://156.238.236.16/fscan']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:37:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860936/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb2215f5-68a0-54d2-b455-21e0b854ed22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ebwgtb.vezaratshart.com/fb82f5d8-cce7-40fc-8896-e8b203ed6459",
      "pattern": "[url:value = 'https://ebwgtb.vezaratshart.com/fb82f5d8-cce7-40fc-8896-e8b203ed6459']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860935/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ff97bbd-9ea5-5d75-9076-d73ae6aa9eac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://5dwz6wj9.yekbetiran.com/?ublib=d790b449-8936-4e40-ba1c-a74795a3adb5",
      "pattern": "[url:value = 'https://5dwz6wj9.yekbetiran.com/?ublib=d790b449-8936-4e40-ba1c-a74795a3adb5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:33:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860934/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc2938a3-9da0-5115-bb58-76bf0ca34f41",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.79.236.129:58909/i",
      "pattern": "[url:value = 'http://39.79.236.129:58909/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860933/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ce092c8-f21a-5804-b3cc-cb90b278b78b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.51.101.109:42924/i",
      "pattern": "[url:value = 'http://115.51.101.109:42924/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:25:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860932/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c9cb80d-516d-5f10-82b4-aa6ed2b77432",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.137.177.17:53633/i",
      "pattern": "[url:value = 'http://61.137.177.17:53633/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:23:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860931/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe14c057-321d-595a-bedd-34a0e5961c49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://154.12.31.97/2bd8ac",
      "pattern": "[url:value = 'https://154.12.31.97/2bd8ac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860930/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfd85b31-cf5e-5224-8bc7-3c79f130a234",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.19.254:43790/i",
      "pattern": "[url:value = 'http://119.179.19.254:43790/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:17:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860929/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b979248-80ae-5661-acc4-991538a76971",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://anpysts.yasbetapp.com/327a6d36-331b-491c-bd15-a5f8dad3c2f0",
      "pattern": "[url:value = 'https://anpysts.yasbetapp.com/327a6d36-331b-491c-bd15-a5f8dad3c2f0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860928/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9d2ec9b-fa5f-5ae9-95b6-b74330dcf495",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.89.246:54150/i",
      "pattern": "[url:value = 'http://110.36.89.246:54150/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860927/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4741089d-f657-52f5-acb5-e7e8afac89bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://118.232.137.101:34841/i",
      "pattern": "[url:value = 'http://118.232.137.101:34841/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:15:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860926/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--313f9dd4-c872-58c2-88a5-0aeb24683f48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.173.34.170:53374/i",
      "pattern": "[url:value = 'http://175.173.34.170:53374/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:14:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860925/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fea3b88-9c39-50c2-bc18-458608c6c925",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://118.232.137.101:34841/bin.sh",
      "pattern": "[url:value = 'http://118.232.137.101:34841/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:07:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860924/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c33a6432-4610-532d-a304-fd67ada1bf80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://114.198.242.174:49905/bin.sh",
      "pattern": "[url:value = 'http://114.198.242.174:49905/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:06:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860923/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd4fb7b8-b403-5ee3-8bd1-47ae33e8f594",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://79.106.225.176:58892/bin.sh",
      "pattern": "[url:value = 'http://79.106.225.176:58892/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T08:04:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860922/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31fb6221-78a5-5343-be9f-1c1df7105355",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.90.162:60105/bin.sh",
      "pattern": "[url:value = 'http://42.231.90.162:60105/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:58:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860921/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe883b48-4113-54b2-ac3c-529e34a4e485",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.226.242:48610/i",
      "pattern": "[url:value = 'http://110.39.226.242:48610/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860920/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bee8dc5f-3e80-5a40-b742-60f9cc756bca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/BirdsKnocked/",
      "pattern": "[url:value = 'https://paste.sensio.no/BirdsKnocked/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:56:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860919/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ddcc067-4fb4-550b-8d1c-23d33c5ec0a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/RovingRandy/",
      "pattern": "[url:value = 'https://paste.sensio.no/RovingRandy/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860918/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b52682f-e8d2-514f-aa13-1df94625ae6d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.89.246:54150/bin.sh",
      "pattern": "[url:value = 'http://110.36.89.246:54150/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860917/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6594651-8264-5569-8ffb-07995b8f5864",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/TulipsCalling",
      "pattern": "[url:value = 'https://paste.sensio.no/TulipsCalling']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860914/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ef5c22d-e408-5f6b-81b3-edf7a1269009",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/CentralTippin",
      "pattern": "[url:value = 'https://paste.sensio.no/CentralTippin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860915/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d6db2f4-cf8b-5c92-84b8-84b696ef92b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/SeymourLeagues",
      "pattern": "[url:value = 'https://paste.sensio.no/SeymourLeagues']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860916/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31486295-770f-5f51-8460-071acf11c06c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/ArlenDenial",
      "pattern": "[url:value = 'https://paste.sensio.no/ArlenDenial']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860913/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97f7d822-ca7a-584c-b0ce-eb93176c4434",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/JavierGigolo",
      "pattern": "[url:value = 'https://paste.sensio.no/JavierGigolo']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860912/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a21951e-80de-5d93-8eba-a64d1683d338",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/ApartAirways",
      "pattern": "[url:value = 'https://paste.sensio.no/ApartAirways']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860910/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcf95d9a-6da5-5f3b-97dd-4f50b685c432",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/CitationCallers",
      "pattern": "[url:value = 'https://paste.sensio.no/CitationCallers']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860911/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1b17bdf-ae74-55be-ba28-7ccb579cb3a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.websenorllc.com/wordpress/IkcdoAf.txt",
      "pattern": "[url:value = 'https://www.websenorllc.com/wordpress/IkcdoAf.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860908/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92cbb17f-8322-563d-ac8a-ffca8ed9cf4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.websenorllc.com/wordpress/jrdpkhg.txt",
      "pattern": "[url:value = 'https://www.websenorllc.com/wordpress/jrdpkhg.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:55:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860909/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b63b0d2d-6098-558c-8b1b-21e5c4713cec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.13.26:50152/i",
      "pattern": "[url:value = 'http://123.11.13.26:50152/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:51:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860907/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a29987f5-f502-5be3-98fc-d07b38d297a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.armv7l",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860902/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89bfeed8-2a44-5b00-bfb1-979dd9ceb4cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.powerpc",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860903/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b547a73a-0dde-51c8-9cc0-f3ca8db85664",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.mips",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860904/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cfae20c-4495-5231-927a-ce0176b07006",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.x86_64",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860905/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0cc7a34-3c55-5a58-9319-067dab254b55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.173.34.170:53374/bin.sh",
      "pattern": "[url:value = 'http://175.173.34.170:53374/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860906/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6212cfdf-45e0-5e64-91b1-fea565eb4ff1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.mipsel",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860895/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--699af563-099e-5093-bc1e-630ab5faaf84",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.armv4l",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860896/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91af7e31-8cf9-575d-b655-590445fe1590",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.i586",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.i586']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860897/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ef5942a-6a70-5da2-827d-470ebe3e5739",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.sh4",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860898/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26ffbb98-d827-588e-a024-ff56559f79f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.armv6l",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860899/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef277a01-9914-5f3a-8939-65a9f064c081",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.i686",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860900/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73c7c4a7-d2b3-520c-add8-6b121a26a4e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.248.192.247/bins/nova.armv5l",
      "pattern": "[url:value = 'http://104.248.192.247/bins/nova.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860901/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4ff003c-ad62-5ada-8adf-933483e3de8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.137.177.17:53633/bin.sh",
      "pattern": "[url:value = 'http://61.137.177.17:53633/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:41:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860894/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--696e2810-8590-50a7-aab2-2f350c918821",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.51.101.109:42924/bin.sh",
      "pattern": "[url:value = 'http://115.51.101.109:42924/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:40:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860893/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab54d453-def8-5b2c-bf93-bc8ee7944762",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cqvdiki.xenicalby6.com/f8a0a06c-b359-4a38-a34f-b1a4942dfaed",
      "pattern": "[url:value = 'https://cqvdiki.xenicalby6.com/f8a0a06c-b359-4a38-a34f-b1a4942dfaed']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:40:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860892/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b6b7875-422b-5c75-b627-03e6e1c9d643",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.189.89:57584/i",
      "pattern": "[url:value = 'http://115.55.189.89:57584/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:36:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860891/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2290319a-7b3d-55bf-b40c-299a7700f113",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.202.186.122:37765/i",
      "pattern": "[url:value = 'http://115.202.186.122:37765/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:28:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860890/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51c83356-04cd-5e1d-9314-ab6c1593788a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.226.242:48610/bin.sh",
      "pattern": "[url:value = 'http://110.39.226.242:48610/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:27:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860889/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d1288cc-e35c-5759-9692-92d290351641",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://nova.ismak.icu/nova.sh",
      "pattern": "[url:value = 'http://nova.ismak.icu/nova.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:27:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860888/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10d3f9a2-693a-5dac-bdf5-1d404b2c4c80",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://solar-sanat.net/fdClient.exe",
      "pattern": "[url:value = 'https://solar-sanat.net/fdClient.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860887/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6737ca9-dd20-5d8b-ac74-f41c633d89aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.202.186.122:37765/bin.sh",
      "pattern": "[url:value = 'http://115.202.186.122:37765/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:21:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860886/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--375dbeda-9ad4-55e8-9740-b9b51d45837d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.90.148.58:51456/i",
      "pattern": "[url:value = 'http://39.90.148.58:51456/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:21:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860885/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd85f227-3133-56fe-a2d9-1291adba34b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.41.106:44324/bin.sh",
      "pattern": "[url:value = 'http://39.74.41.106:44324/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:19:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860884/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b219db71-748b-5dda-9386-2b4655a716ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.114.220.53:39279/bin.sh",
      "pattern": "[url:value = 'http://103.114.220.53:39279/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860883/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aa2b27f-3067-5eea-9f3d-82c3970fc4e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.215.135:39238/i",
      "pattern": "[url:value = 'http://219.157.215.135:39238/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:13:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860882/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c09072ec-5c6b-5d55-8341-6961acce4100",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.97.250.18:45827/i",
      "pattern": "[url:value = 'http://59.97.250.18:45827/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:12:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860881/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0428059-cc41-5280-b218-86f5a41ff99d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pmhaqci.x50wheel.bet/f8ce4e3e-a8cf-4723-875c-930418324c25",
      "pattern": "[url:value = 'https://pmhaqci.x50wheel.bet/f8ce4e3e-a8cf-4723-875c-930418324c25']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:11:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860880/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dc3027e-b04c-5e57-9ed5-8b7df91a77e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.0:33422/i",
      "pattern": "[url:value = 'http://110.36.86.0:33422/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:11:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860879/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08aa4999-7052-5999-8242-9b27fb38b4b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.189.89:57584/bin.sh",
      "pattern": "[url:value = 'http://115.55.189.89:57584/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:08:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860878/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba7b89b0-1d35-5f53-9f7b-d7408077119d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qll4p9fw.one1xiran.bet/?ublib=755318a6-5499-445f-9fe5-6675faf460aa",
      "pattern": "[url:value = 'https://qll4p9fw.one1xiran.bet/?ublib=755318a6-5499-445f-9fe5-6675faf460aa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T07:00:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860877/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--178f1215-5991-52ca-bcab-3f9c8c1c4232",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.224.92.34/Error84",
      "pattern": "[url:value = 'http://91.224.92.34/Error84']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860876/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d26489e4-7515-5437-8f34-9eb3785aa9da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.224.92.34/check1.sh",
      "pattern": "[url:value = 'http://91.224.92.34/check1.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860874/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57396b0f-d078-5554-9247-1d7c8c3c714c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.224.92.34/syst3md",
      "pattern": "[url:value = 'http://91.224.92.34/syst3md']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860875/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d76215e9-567f-57ef-b03f-d380876aa5aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.224.92.34/check.sh",
      "pattern": "[url:value = 'http://91.224.92.34/check.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860873/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f12b7e66-40a2-5c2d-bb24-9ab497759472",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/mnzA",
      "pattern": "[url:value = 'http://188.132.232.81/mnzA']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860869/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bb0b14a-ae1e-563e-a423-c83b6d9e4bbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Z9dI",
      "pattern": "[url:value = 'http://188.132.232.81/Z9dI']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860870/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecd485e1-6257-5383-9e41-d1cf0e2bf257",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/c3P",
      "pattern": "[url:value = 'http://188.132.232.81/c3P']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860871/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f30eb4a-bbe8-5a5e-80dd-b78ce8f9b572",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/JO6",
      "pattern": "[url:value = 'http://188.132.232.81/JO6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860872/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb60736e-348a-5aa0-bc4b-7b051e190a47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.spc",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860864/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ff34314-13e7-5ba9-a2a5-57a1061dccc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.i686",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860865/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c0a8b12-b133-5e56-9e8d-d01e1fd307dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.arc",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860866/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8d5285f-40fa-514e-bd62-894fae685396",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.i468",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.i468']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860867/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5da35e1c-82c1-596b-bdf4-e31baf24a554",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/2ke2",
      "pattern": "[url:value = 'http://188.132.232.81/2ke2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860868/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b05a0fc9-b67f-54ea-b568-e146294facd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.242.135:59321/i",
      "pattern": "[url:value = 'http://110.39.242.135:59321/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:51:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860863/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d591fde-7473-53e8-b73c-62df90ae8c31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.97.178.242/1.exe",
      "pattern": "[url:value = 'http://103.97.178.242/1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:37:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860862/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1ee0894-76dd-5220-9cec-2fd8beaddc2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://114.134.189.226/update.exe",
      "pattern": "[url:value = 'http://114.134.189.226/update.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860861/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8991419b-033a-5a29-83a3-68e8bb40dc45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.239.253:36213/i",
      "pattern": "[url:value = 'http://110.39.239.253:36213/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:33:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860860/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77659bf6-3fa3-5ed3-98b3-2cc8b27a65ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zlyupbm.wrfc8.com/a66d38ec-111e-439f-be44-702e7b6fc426",
      "pattern": "[url:value = 'https://zlyupbm.wrfc8.com/a66d38ec-111e-439f-be44-702e7b6fc426']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:32:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860859/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8167033a-1448-575d-9469-bb815bb27799",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.226.89.59:40239/i",
      "pattern": "[url:value = 'http://42.226.89.59:40239/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:31:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860858/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e920b12-48e5-5d6c-b564-377743573ed0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://9t9m7lad.yektbet.bet/?ublib=49c7479b-ac01-4b5a-8b3c-9784a7fa0ca8",
      "pattern": "[url:value = 'https://9t9m7lad.yektbet.bet/?ublib=49c7479b-ac01-4b5a-8b3c-9784a7fa0ca8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:31:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860857/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c304bea6-e532-5593-a2f1-97462c341f78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bikldg.volleyball.bet/4233e820-508a-4eda-8622-45b207847d67",
      "pattern": "[url:value = 'https://bikldg.volleyball.bet/4233e820-508a-4eda-8622-45b207847d67']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:29:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860856/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a58139bc-0480-542e-92d8-aa8f93761ac5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.239.253:36213/bin.sh",
      "pattern": "[url:value = 'http://110.39.239.253:36213/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:25:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860855/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e48475e4-35a0-5e48-9624-c08faad907c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.168.219:52490/i",
      "pattern": "[url:value = 'http://46.236.168.219:52490/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:16:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860854/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c49939f-5d2f-5e6f-8da8-94d469aafb4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.217/public_files/iWR9oTg.txt",
      "pattern": "[url:value = 'http://196.251.107.217/public_files/iWR9oTg.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860852/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--302bf0da-a52f-5972-a621-3160e6bb79e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.217/public_files/mLDeqtd.txt",
      "pattern": "[url:value = 'http://196.251.107.217/public_files/mLDeqtd.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860853/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39849098-0f74-5a9d-bd18-803f9e0089dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://68.183.58.38/wp-json/gravitysmtp/v1/tests/mock-d",
      "pattern": "[url:value = 'http://68.183.58.38/wp-json/gravitysmtp/v1/tests/mock-d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:13:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860851/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--895f93a5-b56e-52ef-8f22-6e9accc4dc89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://213.87.112.128:47907/Mozi.m",
      "pattern": "[url:value = 'http://213.87.112.128:47907/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860850/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e41f5aa0-285a-5e40-934e-e2f49aa19354",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zqzlac.vezaratshart.com/25a10e4e-ca91-4819-a577-49d1b3e4bde3",
      "pattern": "[url:value = 'https://zqzlac.vezaratshart.com/25a10e4e-ca91-4819-a577-49d1b3e4bde3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:05:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860849/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4895bddc-95f3-50a2-a4a5-2b5f55548d44",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.25.177:44955/i",
      "pattern": "[url:value = 'http://115.48.25.177:44955/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:02:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860847/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6f2b51f-fcd3-5d48-b818-6d89b20db21b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.226.89.59:40239/bin.sh",
      "pattern": "[url:value = 'http://42.226.89.59:40239/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:02:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860848/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bca577ca-76d0-50a6-99b5-af23448c81b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.123.6:33451/i",
      "pattern": "[url:value = 'http://123.9.123.6:33451/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860846/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6e48741-6342-574e-90e9-69327e51d551",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.150.70.109:48442/i",
      "pattern": "[url:value = 'http://175.150.70.109:48442/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T06:00:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860845/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ad75ccf-f072-5878-a944-83f319ddebf9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sesksz.venusbet90.com/28e07abc-18fc-42be-a874-ac07ad14f629",
      "pattern": "[url:value = 'https://sesksz.venusbet90.com/28e07abc-18fc-42be-a874-ac07ad14f629']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:55:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860844/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5570ac2-1cc8-58bf-8415-b1d12c302bab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ylljjmv.wolfenm.com/a639e48b-90ff-4592-93fe-686c715df357",
      "pattern": "[url:value = 'https://ylljjmv.wolfenm.com/a639e48b-90ff-4592-93fe-686c715df357']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:53:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860843/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef962689-369c-584e-a1d0-777a5676a524",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.168.219:52490/bin.sh",
      "pattern": "[url:value = 'http://46.236.168.219:52490/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:48:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860842/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36a3e006-832b-50c9-b1db-416ebd5b0178",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://205.185.114.150/dvr",
      "pattern": "[url:value = 'http://205.185.114.150/dvr']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:47:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860841/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dc73e50-157a-5ce2-9988-f2bce45f6b2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://213.159.34.52:58201/bin.sh",
      "pattern": "[url:value = 'http://213.159.34.52:58201/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:46:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860840/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c1177c3-6c5b-59bc-84f5-a044c8b0ed7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.176.49:59282/i",
      "pattern": "[url:value = 'http://222.138.176.49:59282/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860839/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99d42c1f-b0ae-5057-9366-7d8f932e74a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.130.223:50789/i",
      "pattern": "[url:value = 'http://115.55.130.223:50789/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:41:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860838/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee945e30-e238-579f-8f95-9298aad014da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.123.6:33451/bin.sh",
      "pattern": "[url:value = 'http://123.9.123.6:33451/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860837/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60d08c2c-f0fc-51ec-b463-7a2a8b0e4c2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.0:33422/bin.sh",
      "pattern": "[url:value = 'http://110.36.86.0:33422/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:36:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860836/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a053b668-1af2-5352-bb87-ab4cfe181310",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bzwbfps.winxbet.co/2f2fd5e2-d621-481c-a9d7-cbb31967c036",
      "pattern": "[url:value = 'https://bzwbfps.winxbet.co/2f2fd5e2-d621-481c-a9d7-cbb31967c036']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:15:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860835/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--896f2e89-d72e-5b73-aad3-ff9b0089b2d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://220.177.11.29:59693/bin.sh",
      "pattern": "[url:value = 'http://220.177.11.29:59693/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:12:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860834/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--491d9d41-d386-5e47-a2d6-c8a7caf86b6d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.130.237/check1.sh",
      "pattern": "[url:value = 'http://62.60.130.237/check1.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:09:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860833/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f6fce33-8f61-5028-b544-381e68704f93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.130.237/check.sh",
      "pattern": "[url:value = 'http://62.60.130.237/check.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:08:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860832/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d9882d7-3947-5960-9adc-9bd42f0731d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.150.70.109:48442/bin.sh",
      "pattern": "[url:value = 'http://175.150.70.109:48442/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T05:07:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860831/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3da1c6e-1c8c-5a43-816e-d83f7f9b7eec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gysxrbg.winstone.casino/c0bd7510-5047-4056-b382-60b3f7cc19de",
      "pattern": "[url:value = 'https://gysxrbg.winstone.casino/c0bd7510-5047-4056-b382-60b3f7cc19de']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:55:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860830/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95378eb5-2991-59cb-b0ab-bc576c7bfb22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pqxlboc.winsportiran.com/5806825b-0c73-4276-a831-a9388a5d29d7",
      "pattern": "[url:value = 'https://pqxlboc.winsportiran.com/5806825b-0c73-4276-a831-a9388a5d29d7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:46:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860829/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58d45188-443b-58ac-ba5d-3d4fcbe3e82c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://205.185.114.150/dvr.zip",
      "pattern": "[url:value = 'http://205.185.114.150/dvr.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:43:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860828/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfbf91aa-2371-5691-bfef-9383b4d557a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.116.205:49661/bin.sh",
      "pattern": "[url:value = 'http://182.116.116.205:49661/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860827/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--358d1d02-5c83-5612-863e-71a6c873c074",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://209.141.60.74/b2f628/b.sh",
      "pattern": "[url:value = 'http://209.141.60.74/b2f628/b.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:36:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860826/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e37de570-24a6-5070-89af-767c52a28318",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://205.185.125.141/proxy",
      "pattern": "[url:value = 'http://205.185.125.141/proxy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:36:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860825/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d96b9d0d-d197-5cce-a509-cd2d610bb73d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://209.141.60.74/b.sh",
      "pattern": "[url:value = 'http://209.141.60.74/b.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:35:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860824/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbd58794-1c69-5cba-89d4-67235a2b5bed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://209.141.60.74/t.sh",
      "pattern": "[url:value = 'http://209.141.60.74/t.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:33:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860823/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dbc1e95-7387-53d0-9351-7b6ca4e5216b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://209.141.60.74/w.sh",
      "pattern": "[url:value = 'http://209.141.60.74/w.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:32:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860822/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3bb0304-63ca-5ca1-acdc-7234f28cf99b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://209.141.60.74/h.sh",
      "pattern": "[url:value = 'http://209.141.60.74/h.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:32:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860821/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3aa4c380-2481-5d9d-aa63-1a43fcd84eff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://33liwbcf.parspoker.casino/?ublib=34e9265a-abe6-46b2-8d3b-d390139469e3",
      "pattern": "[url:value = 'https://33liwbcf.parspoker.casino/?ublib=34e9265a-abe6-46b2-8d3b-d390139469e3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:31:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860820/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c5c58d6-322c-5e96-bc72-efc0f9edca04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.70.189:35630/i",
      "pattern": "[url:value = 'http://110.36.70.189:35630/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:30:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860819/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65f647df-7535-5af6-9e3a-43aab60368d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://209.141.62.4/proxy",
      "pattern": "[url:value = 'http://209.141.62.4/proxy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:18:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860818/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebeb6e0a-6314-5930-8275-73eb0692e72c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.37.100.253:48356/i",
      "pattern": "[url:value = 'http://27.37.100.253:48356/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:16:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860817/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b6add3e-2bdf-5e72-8fdf-60937b70b68e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://193.188.21.76/cf",
      "pattern": "[url:value = 'http://193.188.21.76/cf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:12:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860816/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2a5ceec-cef7-5100-a3bb-13a4e85192f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ghbfozy.olabahiskayit.com/bbf06b97-a82a-47d2-99ce-c9e390bef3d1",
      "pattern": "[url:value = 'https://ghbfozy.olabahiskayit.com/bbf06b97-a82a-47d2-99ce-c9e390bef3d1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:07:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860815/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f87416ea-eada-555b-92c4-c22e9d41c2b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://111.88.7.48:39339/i",
      "pattern": "[url:value = 'http://111.88.7.48:39339/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T04:00:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860814/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6ad5cf4-1a5a-536f-b566-a3d91982ff4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://iidqou.jamjahani.app/1e9661d8-53fc-4542-9d47-fa5da1997ed9",
      "pattern": "[url:value = 'https://iidqou.jamjahani.app/1e9661d8-53fc-4542-9d47-fa5da1997ed9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:54:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860813/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00fb789d-6692-5f2f-b197-df1eff04f2c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.146.180:46868/i",
      "pattern": "[url:value = 'http://125.45.146.180:46868/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:51:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860812/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cd37bf7-1474-5be7-a1c1-260a7d3e610f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dphxsy.perfectgame.casino/e3edb6d1-8918-4854-b125-45a60cccdc91",
      "pattern": "[url:value = 'https://dphxsy.perfectgame.casino/e3edb6d1-8918-4854-b125-45a60cccdc91']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:45:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860811/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ef35a87-ab5a-5c85-a867-a9bbf8a03f0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/ohshit.sh",
      "pattern": "[url:value = 'http://38.79.154.87/ohshit.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:44:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860810/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbbce280-ce8f-500c-bc99-d63b38aa2ecc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.53.100:37256/i",
      "pattern": "[url:value = 'http://182.116.53.100:37256/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860809/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a48ca66-2288-5a0c-a193-e92bc814ef21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://147.45.77.20/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://147.45.77.20/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:40:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860808/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0c502b2-1e0b-5559-8eff-d4de43d36474",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://147.45.77.20/bin/support.client.exe",
      "pattern": "[url:value = 'https://147.45.77.20/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:40:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860807/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8042cc4e-99cd-5e06-9095-0cd087c5e5e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.145.160:52902/i",
      "pattern": "[url:value = 'http://42.224.145.160:52902/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:39:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860806/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d200a9a0-9b74-58b2-a21c-bbfc2a91f6b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1f0305",
      "pattern": "[url:value = 'http://45.205.1.59/1f0305']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860798/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b685cb44-401e-517f-91ce-e048bf6a5af5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/898cf5",
      "pattern": "[url:value = 'http://45.205.1.59/898cf5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860799/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6f62b05-9884-56d3-9e53-070c7147369b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/618b35",
      "pattern": "[url:value = 'http://45.205.1.59/618b35']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860800/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a268c72a-93be-5789-a695-a2801d69e589",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/28390a",
      "pattern": "[url:value = 'http://45.205.1.59/28390a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860801/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--defabb66-095a-5283-a44a-74ad1762f1c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/53eb0e",
      "pattern": "[url:value = 'http://45.205.1.59/53eb0e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860802/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d466725e-5802-5fa8-901a-8216e353595d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/00f7b6",
      "pattern": "[url:value = 'http://45.205.1.59/00f7b6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860803/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50bf462e-26e3-547b-8d81-d7d4dfd396b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/869d0a",
      "pattern": "[url:value = 'http://45.205.1.59/869d0a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860804/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b65e390d-52d9-584e-9848-ae1a91121041",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/eda147",
      "pattern": "[url:value = 'http://45.205.1.59/eda147']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860805/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe22643c-7ba3-538e-8ffa-01c9431cd865",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://appdownload.download/app/DeepLSetupwin.zip",
      "pattern": "[url:value = 'https://appdownload.download/app/DeepLSetupwin.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860781/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a2c1bd4-de14-5f3b-a1eb-6e0189f40e41",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/02b670",
      "pattern": "[url:value = 'http://45.205.1.59/02b670']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860782/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e667905-e717-5c6d-b876-413dce675bbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a08bc6",
      "pattern": "[url:value = 'http://45.205.1.59/a08bc6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860783/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e77eb31-1d24-5d52-9b8e-75dda900137c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/601918",
      "pattern": "[url:value = 'http://45.205.1.59/601918']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860784/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a7b177a-51bd-53c3-90c5-b73e511cc984",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/81b87c",
      "pattern": "[url:value = 'http://45.205.1.59/81b87c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860785/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14b621f9-1341-564d-ac06-3e0d7c6986fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a25026",
      "pattern": "[url:value = 'http://45.205.1.59/a25026']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860786/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58e852f0-90f4-5836-9fec-6a8274e463a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/764b0f",
      "pattern": "[url:value = 'http://45.205.1.59/764b0f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860787/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fa2b7b9-b60a-5c16-b0ba-91d87a4c3727",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/680621",
      "pattern": "[url:value = 'http://45.205.1.59/680621']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860788/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--367ad6b2-956b-5dba-b5be-49287136d9d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/407db8",
      "pattern": "[url:value = 'http://45.205.1.59/407db8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860789/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--978b3b85-1e1d-564b-9ab9-35b4a01cf8d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/63e71d",
      "pattern": "[url:value = 'http://45.205.1.59/63e71d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860790/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cc23db0-1739-500a-a654-da24399387e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/de9497",
      "pattern": "[url:value = 'http://45.205.1.59/de9497']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860791/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c5b41cf-1c1d-5a53-ba5d-64244932e628",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/796131",
      "pattern": "[url:value = 'http://45.205.1.59/796131']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860792/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2d5996c-c37a-5b1e-91a2-db0a39417483",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b3dd0f",
      "pattern": "[url:value = 'http://45.205.1.59/b3dd0f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860793/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9dbea19-f55c-5d29-9933-2672432c0dd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/294f93",
      "pattern": "[url:value = 'http://45.205.1.59/294f93']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860794/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--303e3ebd-efad-5dd3-bbc2-1e5471459168",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/3718ad",
      "pattern": "[url:value = 'http://45.205.1.59/3718ad']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860795/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b89d77a8-6852-573b-b2eb-547d53b30a7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/35c4a2",
      "pattern": "[url:value = 'http://45.205.1.59/35c4a2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860796/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bee2dbb-5ef5-5706-b701-f856aa905d14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/726775",
      "pattern": "[url:value = 'http://45.205.1.59/726775']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860797/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60cc6007-a21a-51d6-b7a1-09997239cf6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e6261e",
      "pattern": "[url:value = 'http://45.205.1.59/e6261e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860780/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67c41386-ae2e-5980-8c85-df3ddcc56e6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b1e0ed",
      "pattern": "[url:value = 'http://45.205.1.59/b1e0ed']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860779/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49e82cc3-d55d-5bc2-8b5b-307211dfc4f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d037d3",
      "pattern": "[url:value = 'http://45.205.1.59/d037d3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860776/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0fe133e-15a4-5e23-b2db-5cd262eb97e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/62d462",
      "pattern": "[url:value = 'http://45.205.1.59/62d462']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860777/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37882190-80a1-567b-b966-a66ef1dc2a20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5c7dfe",
      "pattern": "[url:value = 'http://45.205.1.59/5c7dfe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860778/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e8e2fe7-c81f-5022-ab72-fe8503805e95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6fb4fd",
      "pattern": "[url:value = 'http://45.205.1.59/6fb4fd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860775/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--660789f7-4c92-5bcf-b8d0-d00cedb7ea56",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f1ec24",
      "pattern": "[url:value = 'http://45.205.1.59/f1ec24']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860755/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8977222f-d5e1-535e-bed6-e402e6bd697b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/568952",
      "pattern": "[url:value = 'http://45.205.1.59/568952']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860756/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc1eccaf-39cb-57e9-bdcf-4a6260b1d1e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8319c8",
      "pattern": "[url:value = 'http://45.205.1.59/8319c8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860757/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--342c1b15-61d8-5436-ab78-41e4a33375c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/531476",
      "pattern": "[url:value = 'http://45.205.1.59/531476']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860758/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9076d47d-d012-54f9-8a8a-e4d0d45f5167",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/651f02",
      "pattern": "[url:value = 'http://45.205.1.59/651f02']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860759/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87e7fd52-fd33-5f8b-b1fd-2db921f5829e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/89d453",
      "pattern": "[url:value = 'http://45.205.1.59/89d453']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860760/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a91ea95c-aa55-5809-b24e-04a1a55fcbd0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/9cf6c3",
      "pattern": "[url:value = 'http://45.205.1.59/9cf6c3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860761/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dca646f-015e-57cd-b439-d2c420b1e3cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ca5ddc",
      "pattern": "[url:value = 'http://45.205.1.59/ca5ddc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860762/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2dd4d3c-0558-56cd-a582-242c5dc8be88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5dd19c",
      "pattern": "[url:value = 'http://45.205.1.59/5dd19c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860763/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c3e81d4-e7b4-53f9-957e-439c27ffe07e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b83f2e",
      "pattern": "[url:value = 'http://45.205.1.59/b83f2e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860764/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6abd3f53-6c71-5725-b9c9-86dfba29238a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cb8729",
      "pattern": "[url:value = 'http://45.205.1.59/cb8729']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860765/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8383b0d-df09-5c43-9bb1-d16ccb9e4875",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5d7e1e",
      "pattern": "[url:value = 'http://45.205.1.59/5d7e1e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860766/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cea61afd-51ad-5bc5-b71e-39f769acb914",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/87b3cd",
      "pattern": "[url:value = 'http://45.205.1.59/87b3cd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860767/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c045a2d9-b778-50f4-8e37-a2e00459f1f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f9173a",
      "pattern": "[url:value = 'http://45.205.1.59/f9173a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860768/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9921590-99a7-5b36-a93b-91d99c66ac12",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e840fc",
      "pattern": "[url:value = 'http://45.205.1.59/e840fc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860769/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c91f5b0-1ece-58e7-b356-94fd49b654c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c93d53",
      "pattern": "[url:value = 'http://45.205.1.59/c93d53']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860770/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acc2ff6b-e6b9-5837-8e98-6930da426ab1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a2c890",
      "pattern": "[url:value = 'http://45.205.1.59/a2c890']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860771/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6feec372-d0eb-5e98-a719-5b3e401adddc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8c8e9f",
      "pattern": "[url:value = 'http://45.205.1.59/8c8e9f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860772/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e123dcdd-39dd-5874-8877-bcb1d2cf093a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a9709c",
      "pattern": "[url:value = 'http://45.205.1.59/a9709c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860773/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14aa17ae-06bf-5035-905f-dddd595269c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6e21c6",
      "pattern": "[url:value = 'http://45.205.1.59/6e21c6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860774/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32788c1a-8acb-56b4-a92d-5381d8105c79",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/697157",
      "pattern": "[url:value = 'http://45.205.1.59/697157']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860736/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee51fe87-8b72-57dd-966a-298d4c80cc91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c23f88",
      "pattern": "[url:value = 'http://45.205.1.59/c23f88']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860737/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15551136-e49a-5705-884e-489fae221fda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a2c867",
      "pattern": "[url:value = 'http://45.205.1.59/a2c867']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860738/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef68a0d8-2bbf-5eb9-9905-40e9a5820c85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d5cc63",
      "pattern": "[url:value = 'http://45.205.1.59/d5cc63']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860739/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cab593f-182d-578b-8e5e-6ca100490ab2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/98be53",
      "pattern": "[url:value = 'http://45.205.1.59/98be53']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860740/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--761a8da6-9541-51ef-8264-b18f0f584fb9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b0d000",
      "pattern": "[url:value = 'http://45.205.1.59/b0d000']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860741/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f79ee8be-3b15-5c3b-8b7b-5d0eb367cdf6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/bf4143",
      "pattern": "[url:value = 'http://45.205.1.59/bf4143']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860742/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4e6d9b3-a51b-5bb1-be14-a2bf868597b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d43f26",
      "pattern": "[url:value = 'http://45.205.1.59/d43f26']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860743/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--385931b2-9d24-5a4b-94e4-da354728847a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/fa4204",
      "pattern": "[url:value = 'http://45.205.1.59/fa4204']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860744/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79378a22-d774-5eed-b2fe-bafd39927a53",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f1687f",
      "pattern": "[url:value = 'http://45.205.1.59/f1687f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860745/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--163f7c46-1524-5e11-91bb-8a2f0a431361",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c7ec56",
      "pattern": "[url:value = 'http://45.205.1.59/c7ec56']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860746/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf90f76c-a8fc-533f-81ad-bbc394af2ad6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/9c84c4",
      "pattern": "[url:value = 'http://45.205.1.59/9c84c4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860747/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90bccf2f-d063-5f70-9cd9-49e7d3ec6052",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/fa4cc9",
      "pattern": "[url:value = 'http://45.205.1.59/fa4cc9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860748/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9474d355-7980-565f-96f2-754121017c1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/fe44f2",
      "pattern": "[url:value = 'http://45.205.1.59/fe44f2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860749/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b0357bc-ea0e-553c-b610-a6c4982f0cc0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c05772",
      "pattern": "[url:value = 'http://45.205.1.59/c05772']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860750/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6ecd083-2bbc-5e7c-922d-686799cc85cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/88c338",
      "pattern": "[url:value = 'http://45.205.1.59/88c338']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860751/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cdb0ff3-98ed-5375-8d1a-e029a122edf7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/bb6da5",
      "pattern": "[url:value = 'http://45.205.1.59/bb6da5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860752/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--845df9f0-2dda-5269-9aa4-16b79c6be38b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f690cd",
      "pattern": "[url:value = 'http://45.205.1.59/f690cd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860753/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea6a71a1-639e-52ca-868e-cd5b675cc749",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c82c7e",
      "pattern": "[url:value = 'http://45.205.1.59/c82c7e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860754/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ce98d11-8f73-5b96-829f-571528dd0b6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/9QP",
      "pattern": "[url:value = 'http://188.132.232.81/9QP']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860735/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4fdbda1-bbb0-5ba4-8009-a92f86117c1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/nuab",
      "pattern": "[url:value = 'http://188.132.232.81/nuab']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860701/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0347570e-5822-5683-a94e-e37300e85d96",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/WZ8",
      "pattern": "[url:value = 'http://188.132.232.81/WZ8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860702/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--019a0b2e-af18-5140-ae9d-4c8d058a161d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/vB5",
      "pattern": "[url:value = 'http://188.132.232.81/vB5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860703/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43ca0b33-a61c-583d-889c-ea90627476dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/sB8",
      "pattern": "[url:value = 'http://188.132.232.81/sB8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860704/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d474add-0b56-5cfc-9138-c8c529f284f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/8AYu",
      "pattern": "[url:value = 'http://188.132.232.81/8AYu']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860705/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a403b62-e06f-5a48-b9c5-c258729cc10b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/gGB",
      "pattern": "[url:value = 'http://188.132.232.81/gGB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860706/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91f51644-5c2c-5c44-a550-f6347450bd1d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/pkM",
      "pattern": "[url:value = 'http://188.132.232.81/pkM']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860707/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d93db20f-7bf4-50df-be8e-8ecaf6a52241",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/bA5o",
      "pattern": "[url:value = 'http://188.132.232.81/bA5o']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860708/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e1eb85d-d2b3-5ddc-9593-7532d158d1a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Yly",
      "pattern": "[url:value = 'http://188.132.232.81/Yly']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860709/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dc0b4aa-31de-5760-a0c9-a22d5b86dc9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/vXhK",
      "pattern": "[url:value = 'http://188.132.232.81/vXhK']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860710/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad5e65ef-ca5a-59d0-af36-4154b2ed8eff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/LRI",
      "pattern": "[url:value = 'http://188.132.232.81/LRI']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860711/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e06dd565-6b8a-58b8-a641-9f62152b0aff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/y1E",
      "pattern": "[url:value = 'http://188.132.232.81/y1E']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860712/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e01bd3e1-760d-570e-b8cd-494075808b0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/kpR",
      "pattern": "[url:value = 'http://188.132.232.81/kpR']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860713/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a68ce41-580b-5237-a9ee-8017bef71e1c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/TO4",
      "pattern": "[url:value = 'http://188.132.232.81/TO4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860714/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d2a8f86-534e-5eb6-a5f3-dae0e5ca9ba9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Ucr",
      "pattern": "[url:value = 'http://188.132.232.81/Ucr']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860715/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fac39881-e105-5317-9ca4-32636dd9c0e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/S5X",
      "pattern": "[url:value = 'http://188.132.232.81/S5X']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860716/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41568631-6af9-5ffa-9144-4df302a1487b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/4YRX",
      "pattern": "[url:value = 'http://188.132.232.81/4YRX']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860717/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8d3fe57-fb2a-515c-ab22-b0d113d2ae99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Jj0",
      "pattern": "[url:value = 'http://188.132.232.81/Jj0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860718/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71c1337c-a8c3-5926-b748-21d60b9b9ac8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/xeGF",
      "pattern": "[url:value = 'http://188.132.232.81/xeGF']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860719/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc1684aa-b556-5af1-bb35-33a81680fd10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/176102",
      "pattern": "[url:value = 'http://45.205.1.59/176102']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860720/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eabea2a9-238a-5da3-8acd-dfc9c9d2744d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/28c961",
      "pattern": "[url:value = 'http://45.205.1.59/28c961']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860721/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddec5fe7-a0b2-5f61-abda-a42cc826dfb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/078541",
      "pattern": "[url:value = 'http://45.205.1.59/078541']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860722/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--161393bf-8955-5deb-aac7-8dba03e5e55f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2ee017",
      "pattern": "[url:value = 'http://45.205.1.59/2ee017']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860723/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96453e38-c2f9-5f4c-921b-a39d0e3c9dbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0e6dbe",
      "pattern": "[url:value = 'http://45.205.1.59/0e6dbe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860724/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3432ed2-f134-5640-9895-1a9a5e49523c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/3aad49",
      "pattern": "[url:value = 'http://45.205.1.59/3aad49']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860725/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--801b54a2-4527-573b-8156-22fff18ac575",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1a076b",
      "pattern": "[url:value = 'http://45.205.1.59/1a076b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860726/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9685f3c6-a2c2-5f4a-b6ff-e8a94556ecb3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0e1276",
      "pattern": "[url:value = 'http://45.205.1.59/0e1276']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860727/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e41c73e0-cbda-5635-ad9e-8974b8647a4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/3fbf44",
      "pattern": "[url:value = 'http://45.205.1.59/3fbf44']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860728/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c40b667d-96bf-5361-9842-265701308a33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1514d2",
      "pattern": "[url:value = 'http://45.205.1.59/1514d2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860729/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cafc1582-8a84-5905-a0cb-9c34e9ef9fc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/42f6ef",
      "pattern": "[url:value = 'http://45.205.1.59/42f6ef']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860730/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d63e67b4-380f-555e-8a40-61a688cb7bef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/35862d",
      "pattern": "[url:value = 'http://45.205.1.59/35862d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860731/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d9392c6-32db-5d12-9d38-3e1572f6bfe6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4c4cf6",
      "pattern": "[url:value = 'http://45.205.1.59/4c4cf6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860732/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14ad6ad1-30f1-5719-ba59-1cdc96a08185",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4352ef",
      "pattern": "[url:value = 'http://45.205.1.59/4352ef']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860733/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--709e46dd-6936-5848-97f1-997a7e1470bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/033d52",
      "pattern": "[url:value = 'http://45.205.1.59/033d52']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860734/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9c7a49d-4f6a-542a-9625-43868d0686f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bdfzsbr.kvbel.com/24de4591-2b53-4841-b6e7-8fec4710cf7a",
      "pattern": "[url:value = 'https://bdfzsbr.kvbel.com/24de4591-2b53-4841-b6e7-8fec4710cf7a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860700/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12776a40-73d1-5a98-97d6-d0be5ff855fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.25.33:56148/i",
      "pattern": "[url:value = 'http://110.36.25.33:56148/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860699/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e3e3a0b-d9bf-5581-9bb4-908194c55364",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.53.100:37256/bin.sh",
      "pattern": "[url:value = 'http://182.116.53.100:37256/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T03:16:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860698/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--987c7d1c-598c-5ed8-9dbb-6d5e2a1b1219",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.145.160:52902/bin.sh",
      "pattern": "[url:value = 'http://42.224.145.160:52902/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:52:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860697/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d483c64-2675-5fca-8492-905d74ce79ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uadcmxt.kbshavanese.com/b4db77db-37fc-4cf2-99de-d22b2a32e148",
      "pattern": "[url:value = 'https://uadcmxt.kbshavanese.com/b4db77db-37fc-4cf2-99de-d22b2a32e148']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860696/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5aeb69ba-8956-5807-8032-b40467ad0ddb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.93.1:46745/i",
      "pattern": "[url:value = 'http://163.142.93.1:46745/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:45:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860695/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8277e61b-db83-5616-a966-2f1436ceae61",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.118.14:46237/i",
      "pattern": "[url:value = 'http://42.234.118.14:46237/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:41:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860694/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dea9e4f-001c-5c66-995b-37193e9499ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.118.14:46237/bin.sh",
      "pattern": "[url:value = 'http://42.234.118.14:46237/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860693/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--761d5bb2-6047-5674-a174-abfc5b128a8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.25.33:56148/bin.sh",
      "pattern": "[url:value = 'http://110.36.25.33:56148/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860691/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71f4a2a0-ce45-532b-b338-fbb3ceb8710a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.233.216:51884/bin.sh",
      "pattern": "[url:value = 'http://42.232.233.216:51884/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860692/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3890794d-d528-5942-bdb9-c17e60913914",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://1nmuyb5y.parspoker90.com/?ublib=bbf4adc7-1615-47ec-b891-a198d6a62862",
      "pattern": "[url:value = 'https://1nmuyb5y.parspoker90.com/?ublib=bbf4adc7-1615-47ec-b891-a198d6a62862']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:30:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860690/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1283591-014b-5483-ae85-cc58e6dfff24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.194.100:55049/i",
      "pattern": "[url:value = 'http://115.57.194.100:55049/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:26:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860689/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5a3b65e-3089-58d7-85e9-5e2d91d748cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.194.100:55049/bin.sh",
      "pattern": "[url:value = 'http://115.57.194.100:55049/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:24:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860688/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--502579e5-1419-55dc-b384-bc9bc29d9c9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://81.226.168.17:40587/i",
      "pattern": "[url:value = 'http://81.226.168.17:40587/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860687/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5886b97b-eb3d-5fa8-be9f-d8f70d4aa473",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.151.124.34:56539/i",
      "pattern": "[url:value = 'http://175.151.124.34:56539/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:18:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860686/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb02ca11-992d-57b8-b24b-043dd4001778",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.116.205:49661/i",
      "pattern": "[url:value = 'http://182.116.116.205:49661/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:17:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860685/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82e85f20-ae88-5ba2-9d82-3c51ffb0d4a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.197.109:39872/i",
      "pattern": "[url:value = 'http://182.113.197.109:39872/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:14:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860684/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac80c52a-1bec-55ef-9401-20ae027022d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dihsov.jamjahani.cash/1d6a943a-fe67-4697-a0e5-b08d509a30d6",
      "pattern": "[url:value = 'https://dihsov.jamjahani.cash/1d6a943a-fe67-4697-a0e5-b08d509a30d6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860683/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58788b42-2ad3-564c-a17f-eae55f1c5a1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://etpvftw.one1x.bet/9ad11293-5c27-4d14-8484-c74cd494e534",
      "pattern": "[url:value = 'https://etpvftw.one1x.bet/9ad11293-5c27-4d14-8484-c74cd494e534']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:09:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860682/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5783f420-ac2b-5a40-91fb-be48aa4c988b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.13.112.137:57299/i",
      "pattern": "[url:value = 'http://123.13.112.137:57299/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:07:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860681/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46f796b1-e160-5e62-ab47-9d96a1f99932",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.12.47:56850/bin.sh",
      "pattern": "[url:value = 'http://182.121.12.47:56850/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860680/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3afb8148-c470-5e39-81f5-67eecbaadf3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://1hrrc4q6.onexboro.com/?ublib=08d8f571-9ccb-4a64-8224-bb7edc167210",
      "pattern": "[url:value = 'https://1hrrc4q6.onexboro.com/?ublib=08d8f571-9ccb-4a64-8224-bb7edc167210']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T02:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860679/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e6cb627-3535-5e5a-8d29-34da0d91f95f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.11.245:51949/bin.sh",
      "pattern": "[url:value = 'http://115.55.11.245:51949/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:59:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860678/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c72b875-f69c-57d6-801d-281cefb0daf5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://81.226.168.17:40587/bin.sh",
      "pattern": "[url:value = 'http://81.226.168.17:40587/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:56:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860677/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--140f8fd1-8cf7-52a8-a025-33e8218adafd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://eterjrb.one1x.bet/4e6927e6-cd4e-4a23-94be-a39327dbd18d",
      "pattern": "[url:value = 'https://eterjrb.one1x.bet/4e6927e6-cd4e-4a23-94be-a39327dbd18d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:54:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860676/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ca1ebc0-9936-57ef-803c-4fa5d7b017bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.74.11:40488/i",
      "pattern": "[url:value = 'http://110.37.74.11:40488/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860675/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd615334-f4ca-5192-99f5-66e58629ef14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.197.109:39872/bin.sh",
      "pattern": "[url:value = 'http://182.113.197.109:39872/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:49:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860674/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fce7bc6-81c4-53d0-8a5f-94d030e06131",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.13.112.137:57299/bin.sh",
      "pattern": "[url:value = 'http://123.13.112.137:57299/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860673/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec18a5f-6f5e-5b88-ae4d-e2089177743f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.87.108:51991/i",
      "pattern": "[url:value = 'http://110.37.87.108:51991/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:30:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860672/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a671cff-a340-5993-9d05-3cc736cd9a40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.0.107:51748/i",
      "pattern": "[url:value = 'http://110.36.0.107:51748/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860671/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cb3e79e-3041-5d7f-b398-c58769d20296",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://omxvqrt.penalty.casino/78d944f3-9bcc-48f2-b915-9d919fa39a54",
      "pattern": "[url:value = 'https://omxvqrt.penalty.casino/78d944f3-9bcc-48f2-b915-9d919fa39a54']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:20:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860670/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da29362b-b149-5be3-880b-b191c485d6dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.139.42.228:41986/bin.sh",
      "pattern": "[url:value = 'http://222.139.42.228:41986/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:19:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860669/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--035dbb38-23ef-53ce-8f37-c02fb5b8d6c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.11.245:51949/i",
      "pattern": "[url:value = 'http://115.55.11.245:51949/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:14:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860668/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9e9fd8c-e30b-52c8-804d-3bb827c86970",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.87.108:51991/bin.sh",
      "pattern": "[url:value = 'http://110.37.87.108:51991/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:07:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860667/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f3e89c0-0180-56e7-82b7-65b7a6032331",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.239.121.171:53424/i",
      "pattern": "[url:value = 'http://112.239.121.171:53424/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T01:04:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860666/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--292ae75c-e0a1-56ca-aa60-e3423bcb9b62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.249.174:36484/bin.sh",
      "pattern": "[url:value = 'http://110.39.249.174:36484/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:59:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860665/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a637074d-e383-5aa0-9898-217861408be1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.23.216:34971/i",
      "pattern": "[url:value = 'http://110.36.23.216:34971/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:51:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860664/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--347dc90f-a755-5936-ab3a-d2172d440d24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.106.184:32993/i",
      "pattern": "[url:value = 'http://115.52.106.184:32993/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:50:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860663/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--970bb007-be4b-5480-b6ee-d97b17adc36e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://atuxkke.penalti.website/ec7a0d9b-1d16-4c64-8ada-d78bc270708b",
      "pattern": "[url:value = 'https://atuxkke.penalti.website/ec7a0d9b-1d16-4c64-8ada-d78bc270708b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860662/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee66204a-f551-5657-84f6-4cff1c473cd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.239.121.171:53424/bin.sh",
      "pattern": "[url:value = 'http://112.239.121.171:53424/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:40:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860661/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b95c8ef4-6a15-5531-a043-0b0d4b801240",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bl7gsqjt.parsgoal90.com/?ublib=034c46cf-7fc1-4dca-897f-a6ad0a20162c",
      "pattern": "[url:value = 'https://bl7gsqjt.parsgoal90.com/?ublib=034c46cf-7fc1-4dca-897f-a6ad0a20162c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:31:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860660/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d52ff97d-76a9-5248-84ef-be2d4bc299de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://egbofo.jamjahani.cash/30fd1a3b-189c-4d5d-8a5c-cce64ecfaa9f",
      "pattern": "[url:value = 'https://egbofo.jamjahani.cash/30fd1a3b-189c-4d5d-8a5c-cce64ecfaa9f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:30:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860659/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--824a0afd-28f9-5987-bedb-99ccf39cf157",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.23.216:34971/bin.sh",
      "pattern": "[url:value = 'http://110.36.23.216:34971/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:26:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860658/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fbcc70b-d92e-598f-a17a-67501c99d0eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.239.67.66:58752/i",
      "pattern": "[url:value = 'http://113.239.67.66:58752/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:23:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860657/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c682a71-b511-53de-94a2-56666b6a74fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.52.120:38186/i",
      "pattern": "[url:value = 'http://110.37.52.120:38186/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:14:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860656/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff8a915d-1e49-5e01-baa4-78016da68d65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.249.174:36484/i",
      "pattern": "[url:value = 'http://110.39.249.174:36484/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:06:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860655/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdcd896d-2ea0-57bd-bf98-969c1bd3f8ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.m68k",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860645/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e27379e4-96b4-590a-bc22-11126307efd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.x86",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860646/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a615549-1409-5722-9372-ed61ac4a615b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.arm7",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860647/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccdc7fe7-caf1-5b54-92a6-f7b8c63ec5c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.ppc",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860648/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--950162a1-4241-5118-b18d-acca12ca592c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.sh4",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860649/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--037e1a43-c6e0-5de0-86cf-d6839f67a3f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.x86_64",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860650/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4a27237-dd95-58a3-a19f-d791503aea77",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.arm6",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860651/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--996afd43-0c76-5ddd-b82d-7384cb326932",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.arm",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860652/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22a8224f-cba1-5f96-93c5-c756e8979db3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.mips",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860653/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f9796e3-85fe-5560-a886-8763c46066ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.mpsl",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860654/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03abc35e-f57b-560f-a9b2-41fd52f58d49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.79.154.87/hiddenbin/boatnet.arm5",
      "pattern": "[url:value = 'http://38.79.154.87/hiddenbin/boatnet.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:04:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860644/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf7d664b-2795-5a22-b30b-7d109397edf6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pdbrpnf.penaltibazi.com/6ef0281b-e1b9-4b35-bafa-32f9eb8dde33",
      "pattern": "[url:value = 'https://pdbrpnf.penaltibazi.com/6ef0281b-e1b9-4b35-bafa-32f9eb8dde33']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860643/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b1cd32d-56c2-5ae6-ad47-f1bfba417fd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.31.174:50437/i",
      "pattern": "[url:value = 'http://110.37.31.174:50437/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-08T00:01:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860642/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80cf52ae-4f20-5801-b363-73bfb6cd733f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.200.194:41261/bin.sh",
      "pattern": "[url:value = 'http://219.155.200.194:41261/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:59:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860641/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb7ee46c-a8ad-5ae9-8aae-e31c92caca74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.216.103:38560/i",
      "pattern": "[url:value = 'http://110.38.216.103:38560/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:58:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860640/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd3c9d89-46a4-5a60-a24f-6b639d5468e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.106.184:32993/bin.sh",
      "pattern": "[url:value = 'http://115.52.106.184:32993/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:47:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860639/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5114faea-2395-56fd-ad4f-c39d6722daa4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.18.118:34636/i",
      "pattern": "[url:value = 'http://123.8.18.118:34636/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860638/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4830e871-62fe-578a-9712-8864cccd48b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.31.174:50437/bin.sh",
      "pattern": "[url:value = 'http://110.37.31.174:50437/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:39:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860637/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efb80666-7517-5c93-b06d-45497c427f71",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.189.31.218:43801/bin.sh",
      "pattern": "[url:value = 'http://27.189.31.218:43801/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:38:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860636/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f974e62-b29a-5363-9a5b-19e2edf1224c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://37.52.181.243:56366/bin.sh",
      "pattern": "[url:value = 'http://37.52.181.243:56366/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860635/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5596ee77-b274-5f30-909a-448c7e7a50be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://37.52.181.243:56366/i",
      "pattern": "[url:value = 'http://37.52.181.243:56366/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860634/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aead5b65-246d-5352-aa66-d7779b830f43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jhejjsa.penality.casino/36edf993-e4ea-4312-ba0e-bd1ec26c2d5a",
      "pattern": "[url:value = 'https://jhejjsa.penality.casino/36edf993-e4ea-4312-ba0e-bd1ec26c2d5a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:21:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860633/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f6040ee-02d4-5796-a232-bbf538ca35a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.26.33:48827/i",
      "pattern": "[url:value = 'http://110.36.26.33:48827/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860632/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c26a6068-6e10-5243-a646-15ca5bc15039",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.203.248:33024/i",
      "pattern": "[url:value = 'http://115.49.203.248:33024/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:19:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860631/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3e308e6-79b5-5d7d-8d39-2f274727feca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.118.251.219:48407/i",
      "pattern": "[url:value = 'http://119.118.251.219:48407/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:17:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860630/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--535c768d-7bab-5b89-9a85-3247cf7c82b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.18.118:34636/bin.sh",
      "pattern": "[url:value = 'http://123.8.18.118:34636/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860629/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27dfaf3e-ed1a-5d98-bcf0-1353ed5aa07a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.39.231:36713/i",
      "pattern": "[url:value = 'http://182.127.39.231:36713/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:12:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860628/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66ccc417-f807-5869-8000-9a23b039f2ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.143:34846/i",
      "pattern": "[url:value = 'http://163.142.92.143:34846/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:05:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860627/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3fd27f4-0d61-5161-bdba-b84e56e48aa8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.203.248:33024/bin.sh",
      "pattern": "[url:value = 'http://115.49.203.248:33024/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T23:05:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860626/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e52b9f4d-d650-523a-b9b0-735643eebad6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.235.206:48692/i",
      "pattern": "[url:value = 'http://42.232.235.206:48692/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:57:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860625/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7348dc47-bc4b-517b-b380-f7291cdeca5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://121.202.142.137:46266/i",
      "pattern": "[url:value = 'http://121.202.142.137:46266/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860624/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36ebc9b5-400c-5ae1-8e25-ba429e764997",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.26.33:48827/bin.sh",
      "pattern": "[url:value = 'http://110.36.26.33:48827/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:57:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860623/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfe42849-2c4b-5609-a4c6-1e45357d8c2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.219.152.135:55219/i",
      "pattern": "[url:value = 'http://27.219.152.135:55219/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860622/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67287ded-1041-507d-b5e0-310a762015a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.39.231:36713/bin.sh",
      "pattern": "[url:value = 'http://182.127.39.231:36713/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:47:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860621/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38e6a810-31ca-5977-8dc5-1c07740884b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dfjdzmq.penality.bet/79cabd37-7db6-45f5-90e2-137ad5591c8b",
      "pattern": "[url:value = 'https://dfjdzmq.penality.bet/79cabd37-7db6-45f5-90e2-137ad5591c8b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860620/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4df87e28-71ff-50bd-9a98-e0425d3f913e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.189.3.1:45577/i",
      "pattern": "[url:value = 'http://196.189.3.1:45577/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:40:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860619/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0803b8f1-f4d1-5c56-ad93-90b50e268497",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.13.235.209:57163/bin.sh",
      "pattern": "[url:value = 'http://221.13.235.209:57163/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:38:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860618/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--501833c0-0937-5b96-b614-6b9ab12b1d8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.13.235.209:57163/i",
      "pattern": "[url:value = 'http://221.13.235.209:57163/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860617/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68775bde-e05a-511a-91c3-7a5a4ac6ed68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.178.81.179:35549/i",
      "pattern": "[url:value = 'http://42.178.81.179:35549/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:31:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860616/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c1d34b7-9624-53fd-bc53-d610dfba55d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.235.206:48692/bin.sh",
      "pattern": "[url:value = 'http://42.232.235.206:48692/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:30:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860615/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0273ec5c-9496-5c9c-bfce-430008fa1752",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://krqbplar.mrbet90.com/?ublib=bc3fa83a-7af8-4fd4-b336-14c2b2b859a3",
      "pattern": "[url:value = 'https://krqbplar.mrbet90.com/?ublib=bc3fa83a-7af8-4fd4-b336-14c2b2b859a3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:30:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860614/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--764a2ac4-684c-53d5-a262-756ec3030755",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.219.152.135:55219/bin.sh",
      "pattern": "[url:value = 'http://27.219.152.135:55219/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:28:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860613/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0feb2b5-e2cb-53e7-92c6-c1ce28692bfe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.14.171:50985/i",
      "pattern": "[url:value = 'http://221.15.14.171:50985/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:26:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860612/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bed8ce2-7867-59da-8162-fdccd8394338",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ygxcnh.jamjahani.football/36af4cdf-06ba-4c35-9285-6dbeca098a03",
      "pattern": "[url:value = 'https://ygxcnh.jamjahani.football/36af4cdf-06ba-4c35-9285-6dbeca098a03']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:25:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860611/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73244596-c16d-52e7-95d0-7f92235cc485",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.118.251.219:48407/bin.sh",
      "pattern": "[url:value = 'http://119.118.251.219:48407/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:19:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860610/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b25a58da-05ef-5dfc-991f-75366649f949",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://utpesi.pablobet90.com/2628db5c-aafa-439a-bcaa-bdc8d1f79c87",
      "pattern": "[url:value = 'https://utpesi.pablobet90.com/2628db5c-aafa-439a-bcaa-bdc8d1f79c87']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:15:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860609/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e2af73c-fb9c-5d94-9dea-5e845cffe8c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.115.130:54839/i",
      "pattern": "[url:value = 'http://182.116.115.130:54839/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:14:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860607/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5e072c5-6807-5036-b477-03cf9115bd7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.223.140.192:44117/i",
      "pattern": "[url:value = 'http://117.223.140.192:44117/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:14:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860608/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fae590fc-e201-569d-ba09-5c135d541907",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.187.122:38937/i",
      "pattern": "[url:value = 'http://112.248.187.122:38937/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:06:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860606/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce9421fd-2633-5f02-b500-b77ee29d94de",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dvciwh.oxidbet.bet/e4ec1692-9ea8-4f65-9713-f715d1b23697",
      "pattern": "[url:value = 'https://dvciwh.oxidbet.bet/e4ec1692-9ea8-4f65-9713-f715d1b23697']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860605/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60a368d5-3028-5e1a-a489-deb1acc0a521",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jepbtnj.pasur21.com/f4cb3113-e4c4-446c-8cd2-fb0509a271ab",
      "pattern": "[url:value = 'https://jepbtnj.pasur21.com/f4cb3113-e4c4-446c-8cd2-fb0509a271ab']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860604/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17d70a20-085a-5e8b-95ea-4532964a669b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.14.171:50985/bin.sh",
      "pattern": "[url:value = 'http://221.15.14.171:50985/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:02:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860603/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd95e321-bc53-5094-825b-46745911827d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.225.69.235:54062/i",
      "pattern": "[url:value = 'http://42.225.69.235:54062/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T22:01:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860602/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d463c34a-d748-53b0-b89f-3c4ce0bc56bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uznjkx.onlineshart.com/f1c90bd8-f18b-4577-a2f8-d50d2b47930b",
      "pattern": "[url:value = 'https://uznjkx.onlineshart.com/f1c90bd8-f18b-4577-a2f8-d50d2b47930b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860601/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e321f20a-0e7a-5ea1-880d-458ddd25a152",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.225.69.235:54062/bin.sh",
      "pattern": "[url:value = 'http://42.225.69.235:54062/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860600/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2cd944a-8c8b-5bb6-ab12-009fd847aead",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.88.208:39576/bin.sh",
      "pattern": "[url:value = 'http://110.36.88.208:39576/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:53:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860599/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55a11b4d-7305-5802-acb8-d5f882f87452",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.74.45:56586/i",
      "pattern": "[url:value = 'http://110.37.74.45:56586/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860598/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--475b7293-7fd6-50fe-92b0-30473d759de8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.45.209:60678/i",
      "pattern": "[url:value = 'http://123.8.45.209:60678/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:50:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860597/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b0238c8-5cfd-566f-b31b-00ade50e05fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.39.211:39769/i",
      "pattern": "[url:value = 'http://42.228.39.211:39769/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:48:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860596/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac161700-5d04-5bc1-95e8-1e67f0b58dae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.245.15:56804/i",
      "pattern": "[url:value = 'http://42.227.245.15:56804/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860594/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c582327-65b1-5980-bde0-7f922f8c5bd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.134.46.64:55352/i",
      "pattern": "[url:value = 'http://123.134.46.64:55352/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860595/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a44c973-4c6c-5959-a5d4-dc1c6d7dead1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.223.140.192:44117/bin.sh",
      "pattern": "[url:value = 'http://117.223.140.192:44117/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:40:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860593/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49687ac4-f696-5d05-92c4-e8ddbf50feca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://aylkfoq.pasoor11.bet/befd73ed-84e7-48bb-af30-9c8e6e99f9ac",
      "pattern": "[url:value = 'https://aylkfoq.pasoor11.bet/befd73ed-84e7-48bb-af30-9c8e6e99f9ac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860592/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--300562fd-08c2-5803-a0b2-2f33261a389c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.45.209:60678/bin.sh",
      "pattern": "[url:value = 'http://123.8.45.209:60678/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:21:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860591/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9778d457-82b8-526b-a8bd-73894f10648d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.245.15:56804/bin.sh",
      "pattern": "[url:value = 'http://42.227.245.15:56804/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:16:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860590/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69477e29-0c24-5377-af13-ee41a6140b11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uafzmeq.mangobetfarsi.com/0ee681a2-58f8-477d-baf9-807679ec002b",
      "pattern": "[url:value = 'https://uafzmeq.mangobetfarsi.com/0ee681a2-58f8-477d-baf9-807679ec002b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:16:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860589/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59664c80-377d-5899-b603-d6e00d1287fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.30.28:36402/i",
      "pattern": "[url:value = 'http://110.37.30.28:36402/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T21:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860588/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2c9431e-7a5c-53d8-8cab-f63b2c595763",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lxnfayp0.onexfa.com/?ublib=6db755c3-5342-499f-8c12-ce23f2953002",
      "pattern": "[url:value = 'https://lxnfayp0.onexfa.com/?ublib=6db755c3-5342-499f-8c12-ce23f2953002']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:59:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860587/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d055c16-3132-58c4-a543-cd60d937c9ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.32.113:34496/i",
      "pattern": "[url:value = 'http://115.59.32.113:34496/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:58:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860586/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c79e397-051d-578f-ba70-43ade4809a20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dkfcpnk.ninjafruitcubes.bet/ce9087d7-4027-403e-a15f-46a15612c526",
      "pattern": "[url:value = 'https://dkfcpnk.ninjafruitcubes.bet/ce9087d7-4027-403e-a15f-46a15612c526']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860585/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2ece851-dec5-5f0b-8cd9-d22a66ae7897",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.30.28:36402/bin.sh",
      "pattern": "[url:value = 'http://110.37.30.28:36402/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:37:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860584/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73ed102c-2667-5e3e-adad-b5e1994256ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://k3q6fgf9.parsbet90.com/?ublib=681f3ec8-b171-4515-a109-faa76d4f3fde",
      "pattern": "[url:value = 'https://k3q6fgf9.parsbet90.com/?ublib=681f3ec8-b171-4515-a109-faa76d4f3fde']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:30:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860583/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e468313-5455-545f-b207-929912302ace",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.159/uploads/tVsAaW5Suka9.exe",
      "pattern": "[url:value = 'http://62.60.226.159/uploads/tVsAaW5Suka9.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:28:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860582/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e8792c-ae87-5a84-b821-7d4d7e04236a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.93.102:60630/bin.sh",
      "pattern": "[url:value = 'http://125.41.93.102:60630/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:26:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860581/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e6ddbd0-55d2-5056-ba10-f53552589ebe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.216.243.150:39103/bin.sh",
      "pattern": "[url:value = 'http://27.216.243.150:39103/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:24:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860580/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--139ddd4a-aab7-5636-89dc-30b94182477c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://101.108.66.29:41245/i",
      "pattern": "[url:value = 'http://101.108.66.29:41245/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:06:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860579/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03c52f70-86de-5a9f-8828-4d215f2d831c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rritelh.one1xbet.net/05aa8c55-6562-4799-99ba-d385db1db172",
      "pattern": "[url:value = 'https://rritelh.one1xbet.net/05aa8c55-6562-4799-99ba-d385db1db172']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T20:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860578/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49fb3cf5-010e-59ec-bbf5-19da2533568b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.124.220.115:59198/i",
      "pattern": "[url:value = 'http://182.124.220.115:59198/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:58:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860577/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8eff1f61-c7b6-5eaa-ac0d-eb5405b9d63d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://79.106.225.176:58892/i",
      "pattern": "[url:value = 'http://79.106.225.176:58892/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860576/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1717740-6eeb-5dd0-999d-7094f758f3bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://szdfpv.jamjahani2026.football/7ef57ad6-6965-41b5-a223-32096b70cbb4",
      "pattern": "[url:value = 'https://szdfpv.jamjahani2026.football/7ef57ad6-6965-41b5-a223-32096b70cbb4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:55:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860575/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65674d24-7f38-5440-b44e-1eeb4f26d266",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://101.108.66.29:41245/bin.sh",
      "pattern": "[url:value = 'http://101.108.66.29:41245/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:51:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860574/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64e9003e-3fd2-54c9-984d-6a6c8ef0585a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.204.196.38:50107/i",
      "pattern": "[url:value = 'http://27.204.196.38:50107/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:50:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860573/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aac00f7-3c50-50f6-bad5-caf439eb1956",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.13.16:47209/i",
      "pattern": "[url:value = 'http://110.37.13.16:47209/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:45:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860572/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f04aa79c-ec4e-5b0d-bfd0-31c79f08646b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/a-r.m-6.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/a-r.m-6.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860571/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b87619e6-c101-599b-ae05-c2671de87dd0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/s-h.4-.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/s-h.4-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860564/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4a9de70-a8ed-5628-bb76-4f973b42881e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/a-r.m-7.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/a-r.m-7.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860565/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2ba01e4-e5ed-5bc4-ad92-21c3f38e6ac5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/m-p.s-l.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/m-p.s-l.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860566/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96ebf413-d88d-54a4-9db2-209b83b5fae3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/m-6.8-k.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/m-6.8-k.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860567/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5432b330-d7a5-5721-845c-efc8b6c5d487",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/a-r.m-4.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/a-r.m-4.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860568/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aa8acb6-1c6a-514c-989e-7d2b4be5b01e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/p-p.c-.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/p-p.c-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860569/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--419d3f5e-a5cc-5629-901c-bced442b8e10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.124.220.115:59198/bin.sh",
      "pattern": "[url:value = 'http://182.124.220.115:59198/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860570/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e8b552f-71e5-5eef-80ec-cd1c5fa7bdc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/a-r.m-5.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/a-r.m-5.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860562/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c324ecdd-283a-5436-8d80-d831612f0186",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://68.185.152.86:55094/i",
      "pattern": "[url:value = 'http://68.185.152.86:55094/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860563/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec3cdb82-de76-55ef-9207-c4311c5188d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/x-3.2-.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/x-3.2-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860557/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84e02c00-838b-5678-afda-09432ce72fac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/m-i.p-s.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/m-i.p-s.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860558/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb25e9ce-b039-57de-ad16-0437f6676cfd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/x-8.6-.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/x-8.6-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860559/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c0bebaf-dd3a-5e65-8693-7ccda5cc2c2f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/i-5.8-6.Sakura",
      "pattern": "[url:value = 'http://31.56.209.210/i-5.8-6.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860560/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6aaa359-255b-5f02-acc5-1edded31eb62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://68.185.152.86:55094/bin.sh",
      "pattern": "[url:value = 'http://68.185.152.86:55094/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:38:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860561/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8ab402e-605b-5671-9535-819996e7acec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.18.53:40186/i",
      "pattern": "[url:value = 'http://182.121.18.53:40186/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:36:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860556/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ac0bda0-3a34-5221-b3e4-7fb54be6ac9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.204.196.38:50107/bin.sh",
      "pattern": "[url:value = 'http://27.204.196.38:50107/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860555/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a84155b5-b205-5991-8590-156f8ab7663d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ljbtuch.kbshavanese.com/c9d79172-bbad-4268-9cc6-2e3cb99a2bd7",
      "pattern": "[url:value = 'https://ljbtuch.kbshavanese.com/c9d79172-bbad-4268-9cc6-2e3cb99a2bd7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:20:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860554/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94f2d831-5acd-58d7-ae01-19b1fb76ede7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.40.38:46519/i",
      "pattern": "[url:value = 'http://182.113.40.38:46519/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860553/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0e8860f-d6bb-553c-b1bb-5c249ed63f4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.149.183:35005/i",
      "pattern": "[url:value = 'http://115.56.149.183:35005/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:13:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860552/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdd1e775-7c26-5281-a1cb-737f93652ca4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/arm5",
      "pattern": "[url:value = 'http://176.65.139.126/bins/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860545/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e95fde71-1e79-5c4d-a85d-0d4511041dbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/arm",
      "pattern": "[url:value = 'http://176.65.139.126/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860546/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fedd540c-615b-52a6-abb2-e355084fff8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/mipsel",
      "pattern": "[url:value = 'http://176.65.139.126/bins/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860547/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d884669-9707-5988-b5cc-dd8dfe97958f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/arm6",
      "pattern": "[url:value = 'http://176.65.139.126/bins/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860548/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d4ec534-f04e-56d1-94e6-885d0f5939cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/cat.sh",
      "pattern": "[url:value = 'http://176.65.139.126/bins/cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860549/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5890f7c0-4a73-5335-9053-55e0683d8037",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/arm7",
      "pattern": "[url:value = 'http://176.65.139.126/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860550/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63c2ff8f-61e2-57b8-8224-85a9c0c8e4b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/mips",
      "pattern": "[url:value = 'http://176.65.139.126/bins/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860551/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ee1456d-67c3-59b9-ab5c-5c48e49a54f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/sh4",
      "pattern": "[url:value = 'http://176.65.139.126/bins/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860541/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f206f7-9fbe-5af6-87c1-d8a169807bb3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/ppc",
      "pattern": "[url:value = 'http://176.65.139.126/bins/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860542/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0906fb3-761c-5f9f-808c-339039021e32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/x86_64",
      "pattern": "[url:value = 'http://176.65.139.126/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860543/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecf80f4e-880c-5d5d-a7b1-e964ba0c3f11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/m68k",
      "pattern": "[url:value = 'http://176.65.139.126/bins/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860544/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4f4ac5f-7ac7-5584-9675-7262b1fc0991",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/bins/spc",
      "pattern": "[url:value = 'http://176.65.139.126/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:08:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860540/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9344c761-2b2b-59ef-930d-6df9ff40b6a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/x86",
      "pattern": "[url:value = 'http://176.65.139.129/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:07:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860539/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf5894fa-0237-5305-912b-bd75d92e2777",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/i686",
      "pattern": "[url:value = 'http://176.65.139.129/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860531/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ac6f4ad-7520-52ab-8289-006c9e0c55f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/armv7l",
      "pattern": "[url:value = 'http://176.65.139.129/armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860532/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74b070f8-c1aa-5af4-8661-d399edc04428",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/armv6l",
      "pattern": "[url:value = 'http://176.65.139.129/armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860533/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--113f055a-023c-57d6-85f2-1cfa0fcacc40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/mipsel",
      "pattern": "[url:value = 'http://176.65.139.129/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860534/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--970ddb47-309b-5959-bee9-ed24aeca900d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/x86_64",
      "pattern": "[url:value = 'http://176.65.139.129/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860535/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--821c37b0-366c-5fed-9497-1ae2d0eca944",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/mips",
      "pattern": "[url:value = 'http://176.65.139.129/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860536/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a646400-3c4a-5f0e-ad63-02a71be9beb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/ppc64",
      "pattern": "[url:value = 'http://176.65.139.129/ppc64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860537/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--666d41c0-a49b-5e78-a3dd-8fd9bff25bc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/armv5l",
      "pattern": "[url:value = 'http://176.65.139.129/armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860538/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5869fda2-85d5-5650-8e19-8a0e35825f42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.85.198:35908/i",
      "pattern": "[url:value = 'http://163.142.85.198:35908/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:05:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860530/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9203003f-c022-5a91-9914-04241650d0cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.198.224.38/adb",
      "pattern": "[url:value = 'http://45.198.224.38/adb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:04:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860529/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afd8b65b-a661-5bd8-94b7-125f07a3bbfc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.99.167.179:55675/bin.sh",
      "pattern": "[url:value = 'http://119.99.167.179:55675/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:03:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860528/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4545da19-dd6d-5a78-98a9-3505dbed2fda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.85.198:35908/bin.sh",
      "pattern": "[url:value = 'http://163.142.85.198:35908/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860527/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41ea0515-f297-54b6-b030-26f4ca398e71",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.210/Sakura.sh",
      "pattern": "[url:value = 'http://31.56.209.210/Sakura.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:03:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860526/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9bb22f9-467b-5c4b-a1d2-46ae17291b21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.13.16:47209/bin.sh",
      "pattern": "[url:value = 'http://110.37.13.16:47209/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T19:00:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860525/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c019bd5f-9ede-56f7-98f9-d764ba1db9a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.142.242.6:50416/i",
      "pattern": "[url:value = 'http://222.142.242.6:50416/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:52:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860524/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f879fdb-78b1-5430-bab1-251e5048d692",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.149.183:35005/bin.sh",
      "pattern": "[url:value = 'http://115.56.149.183:35005/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860523/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b88aedef-8dda-50ff-8d2b-6c3cada50da3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://eqfjmvb.kvbel.com/192bc255-1b06-439e-b372-3002da2e18c9",
      "pattern": "[url:value = 'https://eqfjmvb.kvbel.com/192bc255-1b06-439e-b372-3002da2e18c9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860522/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a295bd78-2a33-56d5-81e1-2cc7eecbb981",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.176.193:46274/i",
      "pattern": "[url:value = 'http://123.5.176.193:46274/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:37:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860521/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8547ba3-0f85-59a7-8613-3c190bb4e569",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.252:43428/i",
      "pattern": "[url:value = 'http://46.236.65.252:43428/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:30:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860520/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55592267-518d-596f-9529-1cf6f1b3a4c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rsa2rwi5.parsc.bet/?ublib=d4029d3f-0558-41e8-8fce-1ad1760e3b43",
      "pattern": "[url:value = 'https://rsa2rwi5.parsc.bet/?ublib=d4029d3f-0558-41e8-8fce-1ad1760e3b43']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:29:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860519/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c31676b-62ca-5024-9c27-7580cae002da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://180.157.252.30:60322/i",
      "pattern": "[url:value = 'http://180.157.252.30:60322/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:18:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860518/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aec32bfc-96ef-50e3-955e-34bb6fde72f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://usghiem.olabahiskayit.com/c85b6d60-db66-47eb-9d64-50c00104fc97",
      "pattern": "[url:value = 'https://usghiem.olabahiskayit.com/c85b6d60-db66-47eb-9d64-50c00104fc97']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860517/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2ef01df-1b56-515d-8c38-bfa35f297bd1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.49.123:58121/i",
      "pattern": "[url:value = 'http://115.55.49.123:58121/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T18:02:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860516/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd1c9026-94f2-503a-abbc-ab2d7467e158",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.189.108:43976/i",
      "pattern": "[url:value = 'http://42.231.189.108:43976/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:57:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860515/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac16cbd2-4e95-501e-828c-90fd93a892c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://owmekh.yasbet90.com/1428f305-3dd2-4b0c-9668-fb243231a24b",
      "pattern": "[url:value = 'https://owmekh.yasbet90.com/1428f305-3dd2-4b0c-9668-fb243231a24b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860514/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccffd4fe-650a-510f-abb5-d0f8aa3fd47e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.163:55661/i",
      "pattern": "[url:value = 'http://110.36.80.163:55661/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:48:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860513/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3fe6e32-d43a-5ef6-ad08-451b75cade23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.49.123:58121/bin.sh",
      "pattern": "[url:value = 'http://115.55.49.123:58121/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:37:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860512/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93e3c073-84c2-59ee-b47a-46cd0e0656b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://c.fi3.me/666666.png",
      "pattern": "[url:value = 'https://c.fi3.me/666666.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860511/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0231af81-0440-52c0-891e-4f2beedae2a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.54.110.49:56750/i",
      "pattern": "[url:value = 'http://42.54.110.49:56750/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:26:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860510/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47ebc4b3-5e70-5e58-9f62-445469628364",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.163:55661/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.163:55661/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:25:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860509/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--498be099-a775-5733-bc0b-77a234b74107",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nwdzgly.ninjafruitcubes.bet/fe7ead40-c46f-4594-9327-29de54ae3850",
      "pattern": "[url:value = 'https://nwdzgly.ninjafruitcubes.bet/fe7ead40-c46f-4594-9327-29de54ae3850']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860508/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fcfaa3d-6372-5a04-82bd-1bed35a32d4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.54.110.49:56750/bin.sh",
      "pattern": "[url:value = 'http://42.54.110.49:56750/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:23:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860507/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3775c229-db31-53ba-8163-75b771fe4135",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://118.175.205.141:36704/i",
      "pattern": "[url:value = 'http://118.175.205.141:36704/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:23:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860506/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--267e5e54-cf52-5121-8603-71abc3d44e9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.26.164:46914/i",
      "pattern": "[url:value = 'http://110.36.26.164:46914/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:22:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860505/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c930a89-7ee9-5204-be71-1c4fd2cb2bca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.169.246:45354/i",
      "pattern": "[url:value = 'http://61.52.169.246:45354/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:21:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860504/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ca57217-d9a9-5a9f-9bf1-4ff43bc8da96",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.116.217.106:35557/i",
      "pattern": "[url:value = 'http://113.116.217.106:35557/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860503/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8d92b86-89d3-50a2-9367-792c26e0426b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.56.122:41338/i",
      "pattern": "[url:value = 'http://110.37.56.122:41338/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:12:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860502/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--355d27b6-975f-5843-88dd-1061c39d778d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://oregrlk.mangobetfarsi.com/5c40fc7b-9ede-4028-9cf9-401d3a385a05",
      "pattern": "[url:value = 'https://oregrlk.mangobetfarsi.com/5c40fc7b-9ede-4028-9cf9-401d3a385a05']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860501/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0218f1cc-3947-5b71-99e3-0a3a081c1c65",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2f70d3",
      "pattern": "[url:value = 'http://45.205.1.59/2f70d3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:11:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860499/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32ba6422-7f0e-5e34-b8bc-f38c6c2d59ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6c8eb1",
      "pattern": "[url:value = 'http://45.205.1.59/6c8eb1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:11:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860500/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--386a5cfa-07fa-5bb6-9000-42cc19af0513",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/57a8d3",
      "pattern": "[url:value = 'http://45.205.1.59/57a8d3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:10:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860498/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74199fe0-ef58-5de8-a525-9e78a43da9e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/9627aa",
      "pattern": "[url:value = 'http://45.205.1.59/9627aa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860489/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fd07df9-7a38-51e8-9738-b1d7d9397551",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f7959d",
      "pattern": "[url:value = 'http://45.205.1.59/f7959d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860490/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5f499f7-fe9e-51a6-b2f2-bfa7376a72b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cfa9df",
      "pattern": "[url:value = 'http://45.205.1.59/cfa9df']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860491/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3391159c-e2e5-5e91-9c3e-581f461fd920",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/12c83d",
      "pattern": "[url:value = 'http://45.205.1.59/12c83d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860492/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d06d6e80-eba7-5923-b317-4387138f72cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c45af0",
      "pattern": "[url:value = 'http://45.205.1.59/c45af0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860493/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90c96c5b-db4c-55a0-b8bd-3738f4433f0b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5bd263",
      "pattern": "[url:value = 'http://45.205.1.59/5bd263']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860494/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd0b7a8f-ff7c-56c3-a3a0-dd1b829763e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0ed27e",
      "pattern": "[url:value = 'http://45.205.1.59/0ed27e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860495/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac14a3e1-4015-5d03-b830-7ac16ade78f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b8e6a7",
      "pattern": "[url:value = 'http://45.205.1.59/b8e6a7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860496/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cff971b-ff68-5114-827f-30d673cfc0ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/46aa0c",
      "pattern": "[url:value = 'http://45.205.1.59/46aa0c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T17:09:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860497/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3403641-6e37-5161-b89e-70162cc3c3f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.169.246:45354/bin.sh",
      "pattern": "[url:value = 'http://61.52.169.246:45354/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:56:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860488/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74215826-af6c-52be-9259-29d73ee79b5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.185.211:58381/i",
      "pattern": "[url:value = 'http://222.141.185.211:58381/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860487/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c083ea7-0500-58ce-bae7-5c3b380a5c14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.26.164:46914/bin.sh",
      "pattern": "[url:value = 'http://110.36.26.164:46914/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:49:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860486/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c806d16c-ada7-5b09-9f5c-a23a3c07819e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.28.183:53657/i",
      "pattern": "[url:value = 'http://110.36.28.183:53657/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:47:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860485/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58c96323-327d-58dd-bfc4-3af4f403b429",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.56.122:41338/bin.sh",
      "pattern": "[url:value = 'http://110.37.56.122:41338/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:46:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860484/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73ef4f36-3d67-5f06-96f5-1b22c4e1d450",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.62.144.123:34153/i",
      "pattern": "[url:value = 'http://115.62.144.123:34153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:45:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860483/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e18a8523-551f-583e-a48b-c4b01ebd5573",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c7b13d",
      "pattern": "[url:value = 'http://45.205.1.59/c7b13d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:35:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860482/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c915760-b27a-58b7-9dad-cb1fdbcc59ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a5a7f6",
      "pattern": "[url:value = 'http://45.205.1.59/a5a7f6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:34:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860481/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52a8feec-0890-5d86-ba55-efa8de60b93b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/72e450",
      "pattern": "[url:value = 'http://45.205.1.59/72e450']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860471/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bc78415-7b27-538f-8673-3b9a7c2ce7b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/dc6614",
      "pattern": "[url:value = 'http://45.205.1.59/dc6614']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860472/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4059ad2-df6a-5435-8338-05bcf581418a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ab6542",
      "pattern": "[url:value = 'http://45.205.1.59/ab6542']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860473/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32a39719-09e1-540e-b2fa-71a62971ae6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a427c0",
      "pattern": "[url:value = 'http://45.205.1.59/a427c0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860474/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32109e17-3b79-5bfe-af83-ef12825938cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/573d73",
      "pattern": "[url:value = 'http://45.205.1.59/573d73']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860475/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c63e8d3-b7f1-5bdb-ab45-1cad11902b71",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/50a61b",
      "pattern": "[url:value = 'http://45.205.1.59/50a61b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860476/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9b8ae6a-d13b-5a1f-9f31-5e554103c8c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/afc540",
      "pattern": "[url:value = 'http://45.205.1.59/afc540']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860477/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--623864d2-6c4e-5da3-a965-5fbdc4a686df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c1e2c7",
      "pattern": "[url:value = 'http://45.205.1.59/c1e2c7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860478/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d3b4374-9cba-560d-8f4c-98bda7ff7dbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cf574c",
      "pattern": "[url:value = 'http://45.205.1.59/cf574c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860479/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bec41083-bc40-55be-b133-6afb70d7c449",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2bd8ac",
      "pattern": "[url:value = 'http://45.205.1.59/2bd8ac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860480/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5818a5a-193b-5c08-bfa0-28bdfeb513cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jrekcyl.pasoor11.bet/10d9eabf-3290-4d19-abc6-134d814f320f",
      "pattern": "[url:value = 'https://jrekcyl.pasoor11.bet/10d9eabf-3290-4d19-abc6-134d814f320f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:30:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860470/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42352121-8e1c-5068-ab0d-c04e87e075e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rd7o3xct.parsgoal90.com/?ublib=0a46e70a-753d-4eb4-bbc6-01fc5b664f6d",
      "pattern": "[url:value = 'https://rd7o3xct.parsgoal90.com/?ublib=0a46e70a-753d-4eb4-bbc6-01fc5b664f6d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:29:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860469/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce0b2a64-9f5d-5a6d-a9bb-02ae364e9234",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://105.155.11.88:42977/Mozi.a",
      "pattern": "[url:value = 'http://105.155.11.88:42977/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:20:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860468/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--320e525f-9eac-5139-b414-4dd27e828c95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.146.87.225:41750/i",
      "pattern": "[url:value = 'http://175.146.87.225:41750/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:18:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860467/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--571d7744-f622-5760-a5b5-2841ca630bfe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1f883b",
      "pattern": "[url:value = 'http://45.205.1.59/1f883b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860455/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3c004c2-e069-5450-a17f-bdfb0c01c86e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/01e5af",
      "pattern": "[url:value = 'http://45.205.1.59/01e5af']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860456/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1c6a42f-989b-5728-8d79-723fa2b636c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/078c01",
      "pattern": "[url:value = 'http://45.205.1.59/078c01']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860457/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5636aee9-56ad-53c5-b201-f0fd541442e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0391e2",
      "pattern": "[url:value = 'http://45.205.1.59/0391e2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860458/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55a47032-1293-5f95-820f-25c2c26f0725",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/530617",
      "pattern": "[url:value = 'http://45.205.1.59/530617']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860459/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9071e95-4c19-59ed-9baf-7d6cab080efa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8e6bb4",
      "pattern": "[url:value = 'http://45.205.1.59/8e6bb4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860460/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bf50422-2332-5452-aa82-7226f54dfe47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1962e4",
      "pattern": "[url:value = 'http://45.205.1.59/1962e4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860461/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14eecaa7-9da0-5661-b565-5d05c65b0664",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b52b24",
      "pattern": "[url:value = 'http://45.205.1.59/b52b24']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860462/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa259768-1c10-5c7b-b653-36bd4e3efb7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0fa32d",
      "pattern": "[url:value = 'http://45.205.1.59/0fa32d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860463/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcb00da6-a30e-5a8d-9d80-220f8a65ad57",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b17764",
      "pattern": "[url:value = 'http://45.205.1.59/b17764']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860464/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7146b094-124f-54cc-bda5-2b214a2f06b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7c701a",
      "pattern": "[url:value = 'http://45.205.1.59/7c701a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860465/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f966f57-fbd6-5d4f-af86-a01aee495512",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c80f72",
      "pattern": "[url:value = 'http://45.205.1.59/c80f72']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860466/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f88caca-5132-5412-94f9-52c30b951291",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.191.231.12:37372/i",
      "pattern": "[url:value = 'http://196.191.231.12:37372/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860453/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c86323-0b9f-5cbb-9058-815eb434aff5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.200.215.107:53832/i",
      "pattern": "[url:value = 'http://221.200.215.107:53832/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860454/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca3317ca-c49a-5ebb-9b02-c3f050b16065",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.93.153:51666/i",
      "pattern": "[url:value = 'http://163.142.93.153:51666/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:09:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860452/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83d0479e-0d37-5589-a865-c67abff56975",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.243.149.252:46876/i",
      "pattern": "[url:value = 'http://83.243.149.252:46876/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:08:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860451/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41327905-01f7-5252-b568-fefeac0955d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://solar-sanat.net/TitanuimXross01.exe",
      "pattern": "[url:value = 'https://solar-sanat.net/TitanuimXross01.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T16:06:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860450/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ff86368-f4ff-5526-9b13-c7781ba9c656",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xsutsu.jamjahani2026.football/1ce086ac-587e-4e57-a08f-136d355b430f",
      "pattern": "[url:value = 'https://xsutsu.jamjahani2026.football/1ce086ac-587e-4e57-a08f-136d355b430f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:59:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860449/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--befbdfbd-f469-5d5f-b843-99ec5f77e098",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.15.1:52647/bin.sh",
      "pattern": "[url:value = 'http://110.36.15.1:52647/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:58:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860448/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0c88b65-fb16-5732-917e-a6579dd64f8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.228.95:59267/i",
      "pattern": "[url:value = 'http://115.57.228.95:59267/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:58:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860447/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ee8604b-c4b1-5bc6-9dee-d7c87368aab0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://po6drihx.onexprobet.com/?ublib=12625184-be12-4a47-9eb4-4ce06683461b",
      "pattern": "[url:value = 'https://po6drihx.onexprobet.com/?ublib=12625184-be12-4a47-9eb4-4ce06683461b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:58:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860446/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--358fe089-5ff6-512e-a543-e7b9b638c2a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.185.211:58381/bin.sh",
      "pattern": "[url:value = 'http://222.141.185.211:58381/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:57:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860445/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3223a564-95fb-56c6-bf7a-4f3013bb30d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.189.3.1:45577/bin.sh",
      "pattern": "[url:value = 'http://196.189.3.1:45577/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860444/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f48de56-fafa-5303-9648-9e6ddc370f46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8e0edd",
      "pattern": "[url:value = 'http://45.205.1.59/8e0edd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860443/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c766ec2-1b6f-5afa-8ee2-dd1215f9a73e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/adf9ac",
      "pattern": "[url:value = 'http://45.205.1.59/adf9ac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860432/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--001be910-1022-5458-802d-77a81b20461a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/90e66f",
      "pattern": "[url:value = 'http://45.205.1.59/90e66f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860433/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3698320-2736-5ee4-b75b-b0c23eaa7024",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7d8acf",
      "pattern": "[url:value = 'http://45.205.1.59/7d8acf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860434/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2613373-1646-591b-8d4d-b34ef337cf08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/deee19",
      "pattern": "[url:value = 'http://45.205.1.59/deee19']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860435/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbf1361c-218a-5acc-997a-90506523d87a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c75c53",
      "pattern": "[url:value = 'http://45.205.1.59/c75c53']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860436/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--deeae4c4-edfa-5a0c-8f53-d89430dd1a5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0e70cd",
      "pattern": "[url:value = 'http://45.205.1.59/0e70cd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860437/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44e8dd00-8694-5401-9017-797e5bd86224",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/553e9a",
      "pattern": "[url:value = 'http://45.205.1.59/553e9a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860438/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a644272-9d2a-54b9-8bfc-6f4c3d847aaf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6a2a47",
      "pattern": "[url:value = 'http://45.205.1.59/6a2a47']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860439/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66835544-3aa0-5550-9f59-bcbab7afac3f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c9611d",
      "pattern": "[url:value = 'http://45.205.1.59/c9611d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860440/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9a4d74f-688d-5bba-a4d4-178e1ebe832a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6529a3",
      "pattern": "[url:value = 'http://45.205.1.59/6529a3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860441/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a3ff702-93cc-5ad5-b45c-a2194f1eb3eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2ba3fb",
      "pattern": "[url:value = 'http://45.205.1.59/2ba3fb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860442/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19dfb41d-4a49-5166-b778-6e1a16d0f22c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.101.161:51316/i",
      "pattern": "[url:value = 'http://112.248.101.161:51316/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:52:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860431/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86e3228b-5eb5-5398-824d-d159a2b9bf0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/9802be",
      "pattern": "[url:value = 'http://45.205.1.59/9802be']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:52:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860430/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a94687c7-3d0c-5535-ab16-128ccef47505",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c92abe",
      "pattern": "[url:value = 'http://45.205.1.59/c92abe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:51:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860427/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69416606-e3ac-5edd-b800-cb476739320a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5f53f2",
      "pattern": "[url:value = 'http://45.205.1.59/5f53f2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:51:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860428/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdbb6642-9898-5fb7-abce-4c5c13dff3d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.191.231.12:37372/bin.sh",
      "pattern": "[url:value = 'http://196.191.231.12:37372/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:51:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860429/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--788efd5e-93f4-5961-8c2a-f5ef2423a17a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5d9d75",
      "pattern": "[url:value = 'http://45.205.1.59/5d9d75']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860424/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01b8e667-a2bb-5742-88f5-d4cda08be73b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.x86",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860425/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a023cf8-42a6-5125-b410-e527af7efbdb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.arm",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860426/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c0c7d84-c3cd-573a-bea9-6744d352915e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0d4ac9",
      "pattern": "[url:value = 'http://45.205.1.59/0d4ac9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860416/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5b39fba-768c-5646-a50c-22900a6234fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e3c531",
      "pattern": "[url:value = 'http://45.205.1.59/e3c531']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860417/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4fbd3ab-4672-56a8-b2fd-a20264cb2206",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d784f8",
      "pattern": "[url:value = 'http://45.205.1.59/d784f8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860418/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76d836c0-fe5e-5815-803a-7287392054e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1807f0",
      "pattern": "[url:value = 'http://45.205.1.59/1807f0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860419/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8db9f574-dca0-5d4a-893b-95b861b566e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6afd6b",
      "pattern": "[url:value = 'http://45.205.1.59/6afd6b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860420/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89026ec0-d422-53d5-b4cd-d628aa7464a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/011ad4",
      "pattern": "[url:value = 'http://45.205.1.59/011ad4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860421/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0016097a-ca17-57b1-9aa4-d4c6eecaa319",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0b6a4a",
      "pattern": "[url:value = 'http://45.205.1.59/0b6a4a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860422/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8a60fb2-35b8-50d1-8d88-5198cd6eb85c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/462880",
      "pattern": "[url:value = 'http://45.205.1.59/462880']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860423/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bf625b1-0979-52b9-b76b-37e4ed1f2842",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ddimsjy.pasoorbazi.casino/5e8937e2-dca4-439a-b569-962ccabd7eba",
      "pattern": "[url:value = 'https://ddimsjy.pasoorbazi.casino/5e8937e2-dca4-439a-b569-962ccabd7eba']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:50:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860415/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da2c9ee0-368e-504a-ab92-91305beadef8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.mpsl",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860414/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d97400d-e302-5b29-a605-e05c9192b0eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.sh4",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860411/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0185beab-1f67-5828-8b64-ed521d436dd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.arc",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860412/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c15b2d2-c240-5278-b846-18153ff5e571",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.m68k",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860413/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ab6b872-a7ec-585b-9079-4962ebc8cbdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.arm4",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860409/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65289684-877c-5ff7-ab2e-c1f3296bcb00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.i686",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860410/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41cc9d11-a9f8-5f9f-9d8d-da1aa89c5da4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.arm6",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860408/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f547bd5-807e-528d-a501-98636561e4cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.arm5",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860404/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d98d0d64-3856-5ce5-ba3b-666e983a2857",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.ppc",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860405/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74b4ea22-5b46-5c57-8432-ee60f61d8d3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.mips",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860406/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bec6f548-93ac-557d-8106-8746d043bfa2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.arm7",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860407/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e4473f9-9b23-52b6-8b3b-ca1d2674d414",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.i586",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.i586']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860400/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbaccf8f-f5a8-5fb6-9ba7-54e0ac9cd0d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.mipsel",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860401/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b374f00d-0235-5bfd-8d67-61c5b02e93d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.powerpc",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860402/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--714ff203-770f-50e9-9e5a-e9ce76402286",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/CRY.sparc",
      "pattern": "[url:value = 'http://94.183.232.247/CRY.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860403/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21299f94-e833-5563-9d02-10273b68fd1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c483ec",
      "pattern": "[url:value = 'http://45.205.1.59/c483ec']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860388/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d35aeb17-135c-55a2-8d09-bc78850582f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/80af69",
      "pattern": "[url:value = 'http://45.205.1.59/80af69']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860389/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44e65719-834e-5f22-a002-b3437a79af4d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ab895d",
      "pattern": "[url:value = 'http://45.205.1.59/ab895d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860390/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4489b293-39d8-5627-985f-30981011fb83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d004aa",
      "pattern": "[url:value = 'http://45.205.1.59/d004aa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860391/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--198c92b2-2b9a-547f-b44c-aec6c84140ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b833b0",
      "pattern": "[url:value = 'http://45.205.1.59/b833b0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860392/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb2e2b23-78a4-5435-b588-9e69fb5ba765",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/eb3222",
      "pattern": "[url:value = 'http://45.205.1.59/eb3222']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860393/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7bb885f-7548-56ba-b63d-c45f367a846a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c2f023",
      "pattern": "[url:value = 'http://45.205.1.59/c2f023']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860394/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--541a73e6-3908-5806-84e8-b617ed305fc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/34587d",
      "pattern": "[url:value = 'http://45.205.1.59/34587d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860395/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01caf9b9-04a1-5273-aa31-5036f6315586",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/37d75e",
      "pattern": "[url:value = 'http://45.205.1.59/37d75e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860396/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94b4f5e5-8a45-57a8-a272-075cd58cab66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/61c333",
      "pattern": "[url:value = 'http://45.205.1.59/61c333']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860397/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60e93524-ea13-5d45-a773-bd0d48f8df35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/258e32",
      "pattern": "[url:value = 'http://45.205.1.59/258e32']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860398/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--482bc613-4724-5729-9271-aa45d5a1d57e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/963448",
      "pattern": "[url:value = 'http://45.205.1.59/963448']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860399/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1618e4a7-2e73-5213-a14f-e44d638e8c38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wxjbkv.onlineshart.com/b7722ac8-ee81-4c41-9527-1c32111583e2",
      "pattern": "[url:value = 'https://wxjbkv.onlineshart.com/b7722ac8-ee81-4c41-9527-1c32111583e2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860387/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e081965-ca3f-5448-8e76-95eefdf27d48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://whdecl.oxidbet.bet/0e72c41b-bb4c-4fe8-a910-68498c5fd8c1",
      "pattern": "[url:value = 'https://whdecl.oxidbet.bet/0e72c41b-bb4c-4fe8-a910-68498c5fd8c1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860386/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--305007d0-7ec0-5ee1-81bc-a72de7beadaf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.228.95:59267/bin.sh",
      "pattern": "[url:value = 'http://115.57.228.95:59267/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:32:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860385/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4585c51-6d71-5d32-acc5-d9e6d68b8eb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f413aa",
      "pattern": "[url:value = 'http://45.205.1.59/f413aa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:30:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860382/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22c3d263-fe4e-5502-aa66-1542b76fcfa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/90ecdb",
      "pattern": "[url:value = 'http://45.205.1.59/90ecdb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:30:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860383/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c746870-0d3c-53ec-a5d9-de0994114790",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/9e8f68",
      "pattern": "[url:value = 'http://45.205.1.59/9e8f68']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:30:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860384/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea527bb0-3c5a-582a-9c21-2ed0f0101517",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ef18ef",
      "pattern": "[url:value = 'http://45.205.1.59/ef18ef']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860381/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c90bbf4b-7cb1-595d-a815-8c772623db0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/dd744a",
      "pattern": "[url:value = 'http://45.205.1.59/dd744a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860373/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cd65cf3-a0ec-5510-9516-53ea5e6e3244",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d2f0ce",
      "pattern": "[url:value = 'http://45.205.1.59/d2f0ce']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860374/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--590da012-8452-584a-b147-e1d86c06dbd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/91ec19",
      "pattern": "[url:value = 'http://45.205.1.59/91ec19']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860375/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bd476b2-1de1-5dda-a544-d9ff687a7a3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5bd151",
      "pattern": "[url:value = 'http://45.205.1.59/5bd151']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860376/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13b8a8d1-7c35-5035-a751-fddd107585ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b89af0",
      "pattern": "[url:value = 'http://45.205.1.59/b89af0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860377/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc72dcbb-6a25-5b3d-b2a0-72c5da5e2490",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/47c0a3",
      "pattern": "[url:value = 'http://45.205.1.59/47c0a3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860378/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9539bd7a-7108-5ae8-8922-2f9ef653aac8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4621af",
      "pattern": "[url:value = 'http://45.205.1.59/4621af']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860379/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68f387a7-8fe6-53dc-a0a2-73a2190ecd79",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5f10ee",
      "pattern": "[url:value = 'http://45.205.1.59/5f10ee']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860380/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4edd7edb-b34a-5f12-b495-56b475e2b041",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/caae36",
      "pattern": "[url:value = 'http://45.205.1.59/caae36']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:27:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860372/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ca4f543-50ff-5d17-82e6-decaf6118918",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1c44fd",
      "pattern": "[url:value = 'http://45.205.1.59/1c44fd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860369/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d275343d-f297-50c1-9e55-8a81c8e34399",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7c637b",
      "pattern": "[url:value = 'http://45.205.1.59/7c637b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860370/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5bb2c7c-4b22-53da-8466-7658b989a17e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c8057c",
      "pattern": "[url:value = 'http://45.205.1.59/c8057c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860371/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--336dd2ae-738d-5fef-9d61-238cb80d9579",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/abd761",
      "pattern": "[url:value = 'http://45.205.1.59/abd761']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860365/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c7e9eb5-a767-5fc4-b0f3-a59341053fbc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2f183a",
      "pattern": "[url:value = 'http://45.205.1.59/2f183a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860366/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e41f601-91e6-5c48-9025-267e273b5aca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e0ecf6",
      "pattern": "[url:value = 'http://45.205.1.59/e0ecf6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860367/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f95d1b7-68a0-52a3-b3ed-59ad249bc573",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f37220",
      "pattern": "[url:value = 'http://45.205.1.59/f37220']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860368/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--522f0440-2f06-5763-a996-bebdbca91c83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4dddb2",
      "pattern": "[url:value = 'http://45.205.1.59/4dddb2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860364/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eb31555-91d6-5f4a-a45a-26ae74e1f0ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4b4b3d",
      "pattern": "[url:value = 'http://45.205.1.59/4b4b3d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860361/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--969828ef-f879-5162-b843-1ae0fda55d6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4eff91",
      "pattern": "[url:value = 'http://45.205.1.59/4eff91']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860362/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4621b16-b2d2-5040-8bb0-e53d9c7495dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7a9f22",
      "pattern": "[url:value = 'http://45.205.1.59/7a9f22']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860363/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b404b573-d1d2-5a54-b2d8-7b5d00c73c20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mutvwz.ozabet90.com/62030003-8ef6-40e2-b704-15bf8f1b811b",
      "pattern": "[url:value = 'https://mutvwz.ozabet90.com/62030003-8ef6-40e2-b704-15bf8f1b811b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:26:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860360/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27d4b141-0190-536a-9b8b-39d0d1cad38e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.sh4",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860346/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6163f01-c450-5f3d-8dc3-a6d7757e888f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.mips",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860347/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2af6e538-09bf-5f1f-87d7-e9da9d538fc3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.i468",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.i468']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860348/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90aafdd4-c189-5ec8-85d0-1f375e4cc1b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.arc",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860349/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcc52254-bbdc-5191-a2bc-53455d27662d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.ppc",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860350/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d6f3f12-e42a-5c6a-b7a4-026e857c7886",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.m68k",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860351/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddfc4e1b-c144-58b9-a100-fca2d51ea992",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.i686",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860352/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57dd53bb-d29e-55a1-bcac-e66f15b89824",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.arm6",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860353/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a23e22f5-4088-5316-b27f-c41898977594",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.x86_64",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860354/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ca134a7-febf-5df6-94ae-4085b1279ea6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.arm5",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860355/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38d29651-e3a3-53bf-b7ad-6f948763d9f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.arm",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860356/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c2099db-efd7-5885-86a4-5d43c207b63c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.spc",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860357/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92d4a723-1df7-5ffe-8da4-bac7a177a80c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.arm7",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860358/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d190fb9-614c-5bab-be99-fbe4149736e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.mpsl",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860359/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--851fd76a-242b-5980-8b13-d9d43b80b897",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/sh4",
      "pattern": "[url:value = 'http://176.65.139.68/bins/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860345/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e53701e-1c98-5fd9-b1b3-427e9bade859",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/x86",
      "pattern": "[url:value = 'http://176.65.139.68/bins/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860335/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--420313b9-0906-5cec-951e-8b6b65544ef4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/mipsl",
      "pattern": "[url:value = 'http://176.65.139.68/bins/mipsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860336/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90861c3e-e12f-5351-9ff6-26e5552a2f32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/m68k",
      "pattern": "[url:value = 'http://176.65.139.68/bins/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860337/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba46f709-5e08-56b9-adba-3df5f77d12f3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/arm7",
      "pattern": "[url:value = 'http://176.65.139.68/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860338/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afaee0a4-7357-5c25-8fee-292d1c6db27e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/x86_64",
      "pattern": "[url:value = 'http://176.65.139.68/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860339/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eac0de46-9d89-5ec4-9c99-8f6894fd4bd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/arm",
      "pattern": "[url:value = 'http://176.65.139.68/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860340/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2cc7069-0d20-5057-a792-302fb9cca9c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/ppc",
      "pattern": "[url:value = 'http://176.65.139.68/bins/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860341/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b558f79-4b85-590c-bba3-a42228ad963d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/mips",
      "pattern": "[url:value = 'http://176.65.139.68/bins/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860342/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ffdc642-0d11-5cc1-8451-686d5c04fd0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/sparc",
      "pattern": "[url:value = 'http://176.65.139.68/bins/sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860343/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9591b4a8-a37b-573b-b354-ee5e8fdc24b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/arc",
      "pattern": "[url:value = 'http://176.65.139.68/bins/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860344/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7866ae4-0d63-5787-b72e-c856ffac1ea7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/mips64",
      "pattern": "[url:value = 'http://176.65.139.68/bins/mips64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860331/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4653c72-1f3d-56b4-82a8-854f22c234f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/arm6",
      "pattern": "[url:value = 'http://176.65.139.68/bins/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860332/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0114338-27ab-5c52-9137-ba238c96bb9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/arm5",
      "pattern": "[url:value = 'http://176.65.139.68/bins/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860333/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--862ec65e-5690-5585-9bd4-308acc56d974",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.68/bins/i686",
      "pattern": "[url:value = 'http://176.65.139.68/bins/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860334/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d26c808-1293-5ee2-93dc-e95de2a6b701",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.arm7",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860330/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2c4b397-fcd5-53e7-b1aa-6babd4a2ab93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.arm5",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860319/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7538c0c0-d973-5e36-a4c8-c4948c08722c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.arm6",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860320/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54b9cd77-12c9-555c-9765-f9c6c45e268f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.126.210.239/bins/arm7",
      "pattern": "[url:value = 'http://45.126.210.239/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860321/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75a7cabc-9824-5f0c-ac94-d7cabf721a74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.x86",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860322/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fcc6468-3946-5fa1-9231-310be178fd54",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.arc",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860323/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdb7349e-4715-594b-aa98-85e9b16042c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.sh4",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860324/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9fa74cf-26f2-5199-b555-1a433378411c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.ppc",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860325/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce35d793-55bb-50e9-a366-1bcdf08fe63f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.m68k",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860326/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fba526f-72b7-57b9-b53c-98ef7e8cc3b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.x86_64",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860327/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7533c16-2b0b-52f2-87bc-3e6d497de4a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/1.sh",
      "pattern": "[url:value = 'http://96.62.214.170/1.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860328/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a568cb9-4576-57a4-af66-00227ade5966",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.mips",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860329/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76b69dd0-eaab-5263-9288-7b2269df9fc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.126.210.239/bins/arm",
      "pattern": "[url:value = 'http://45.126.210.239/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860312/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f9a4856-6bd7-5f27-81d0-c6b137ea731a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.i686",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860313/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de0a8605-426a-5f81-a602-48a86e82cef3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.sparc",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860314/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7d6afca-b49b-58d5-bb0a-96b0a1704c4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.126.210.239/bins/dbg",
      "pattern": "[url:value = 'http://45.126.210.239/bins/dbg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860315/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--186e3096-d975-590a-bb04-5e3b49403f5e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.126.210.239/bins/x86",
      "pattern": "[url:value = 'http://45.126.210.239/bins/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860316/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6010651a-90c6-55cc-b422-eba4faa8da8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.mpsl",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860317/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba5d7d13-bd6a-5d1d-8335-4fbbbfaa7ffb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.arm",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860318/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--151b739f-97b8-507e-99df-8cca2605b85a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.62.214.170/hiddenbin/Mystic.mips64",
      "pattern": "[url:value = 'http://96.62.214.170/hiddenbin/Mystic.mips64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860311/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--583edbbf-6fa2-591c-ac49-427529f3e37e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.226.139.102/terrabot/023782pler.x86",
      "pattern": "[url:value = 'http://103.226.139.102/terrabot/023782pler.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860310/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30b966cb-2915-5e5d-89e8-a44189704bb5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/nqmwdsyht",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/nqmwdsyht']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860307/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aae74a98-bef7-5df1-b0a2-590c8e2f999c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.126.210.239/bins/mipsel",
      "pattern": "[url:value = 'http://45.126.210.239/bins/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860308/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c7ca61c-12d4-5239-907a-22da91e8bad9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/run.sh",
      "pattern": "[url:value = 'http://176.65.139.129/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860309/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4377fdf-6e8f-5ca8-9bfa-554fd6b63087",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/f9d3a7c2/bot_arm",
      "pattern": "[url:value = 'http://176.65.139.41:8888/f9d3a7c2/bot_arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:24:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860306/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d833a56e-7eb8-5410-8d1e-dbe33dba75e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/dtjogcysu",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/dtjogcysu']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860292/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf7de898-817c-5e9f-a623-7d76c6908f14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/ytaabxcxa",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/ytaabxcxa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860293/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--481e5172-4ea4-5b51-9485-e9c2167e701a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/lqtucsxvn",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/lqtucsxvn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860294/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d33a01b8-84aa-5302-a9e9-539af04aa54a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/1.sh",
      "pattern": "[url:value = 'http://64.89.162.105/1.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860295/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2199eed4-f97a-54ba-86fc-af1e5400e8fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/simjxtksv",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/simjxtksv']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860296/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74deb629-7a9a-5acc-8f7e-09856099c1f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/uoicjoyug",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/uoicjoyug']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860297/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69144901-d5c5-542c-bea5-4879fcf75ddf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/obmsxxvnc",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/obmsxxvnc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860298/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48524eff-abda-5e54-b108-01b867fb90e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/zlkbnkpmc",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/zlkbnkpmc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860299/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27229b33-fae0-5aff-85c7-17339927fdbe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/morormcey",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/morormcey']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860300/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f93eef5-538a-5758-ad07-e8154e314289",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/lfpxfytvz",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/lfpxfytvz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860301/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64055d14-32ce-5f65-bc89-e6c6cfddb696",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/tdhyctkjq",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/tdhyctkjq']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860302/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a94fb29c-a4b8-53eb-bdb6-a26bf9df515f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/rubcopfkd",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/rubcopfkd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860303/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdafd834-fe4f-58cc-bd8d-2436571d084a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/kznpkpoyh",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/kznpkpoyh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860304/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--483ddffa-60b6-5f00-95e8-7eb2542cf31a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.105/hiddenbin/evpyuqbis",
      "pattern": "[url:value = 'http://64.89.162.105/hiddenbin/evpyuqbis']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860305/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21d47d58-5e05-5341-adfc-0c4d9830d582",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://seuvsq.pablobet90.com/172ed5dc-3712-4551-a9e5-935744c282c2",
      "pattern": "[url:value = 'https://seuvsq.pablobet90.com/172ed5dc-3712-4551-a9e5-935744c282c2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:14:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860291/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--999bfd3d-3d8a-5e81-97f7-da0c3bb30508",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.243.149.252:46876/bin.sh",
      "pattern": "[url:value = 'http://83.243.149.252:46876/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:13:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860290/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cda2cf84-9adb-53ac-95a7-d93d53f4ad04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://eqzsjra.pasur21.com/0c929a90-daf9-4543-a879-4943b6dc6b2d",
      "pattern": "[url:value = 'https://eqzsjra.pasur21.com/0c929a90-daf9-4543-a879-4943b6dc6b2d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860289/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08ca3291-f18d-5d12-9808-4a234533e63d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://quyycf.parsball.casino/f6dff591-dbd0-4097-b6bf-44da1c298a95",
      "pattern": "[url:value = 'https://quyycf.parsball.casino/f6dff591-dbd0-4097-b6bf-44da1c298a95']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860288/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5fdb371-5a57-557e-ac02-89300669cc8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.118.77.193:60669/i",
      "pattern": "[url:value = 'http://119.118.77.193:60669/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:08:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860287/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac574aef-4832-57f1-ae9a-a9003b515479",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.160.98:52782/bin.sh",
      "pattern": "[url:value = 'http://115.48.160.98:52782/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:05:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860285/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6898fd78-643b-5c82-9090-99148652f50e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.18.124:55462/bin.sh",
      "pattern": "[url:value = 'http://123.12.18.124:55462/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:05:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860286/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57dd3d72-b543-5654-a977-6d86a026dca8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.200.215.107:53832/bin.sh",
      "pattern": "[url:value = 'http://221.200.215.107:53832/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T15:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860284/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70809228-be7d-575d-9d9b-3e128d026b85",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/998de4",
      "pattern": "[url:value = 'http://45.205.1.59/998de4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860279/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6648af67-29ba-5865-ada4-fb51f1d0322f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/45bf81",
      "pattern": "[url:value = 'http://45.205.1.59/45bf81']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860280/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee597f3e-400c-569f-a66a-deb1ce439fba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e906f7",
      "pattern": "[url:value = 'http://45.205.1.59/e906f7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860281/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d461bdb3-f848-53d8-8f0e-da4145386200",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/95308b",
      "pattern": "[url:value = 'http://45.205.1.59/95308b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860282/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cac87ba-e9c6-566a-a35b-6bc5a77f171d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f27832",
      "pattern": "[url:value = 'http://45.205.1.59/f27832']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860283/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7aacc9bd-987d-5764-8a96-54d8e4d078c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/11d2ef",
      "pattern": "[url:value = 'http://45.205.1.59/11d2ef']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ddf8d90-0047-55d8-a798-51815e298b7d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cadd23",
      "pattern": "[url:value = 'http://45.205.1.59/cadd23']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c63d554d-2899-5b65-8756-9e897c4457d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e3c653",
      "pattern": "[url:value = 'http://45.205.1.59/e3c653']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8302f4f5-312b-55e1-80b9-0e912f9c817a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f5de46",
      "pattern": "[url:value = 'http://45.205.1.59/f5de46']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860275/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1a8a7b9-bbe9-5a58-936c-426771622dc2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f36ef8",
      "pattern": "[url:value = 'http://45.205.1.59/f36ef8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860276/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f815355-6e37-5920-8dfc-965ef5cc641c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c71254",
      "pattern": "[url:value = 'http://45.205.1.59/c71254']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860277/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d75777d4-347b-5b0a-909e-f96a4cad93c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f1fa84",
      "pattern": "[url:value = 'http://45.205.1.59/f1fa84']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:52:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860278/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a378cdf-3763-5abd-8a60-8261e38fd0be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.46.228.120:39684/i",
      "pattern": "[url:value = 'http://125.46.228.120:39684/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:51:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00bf358a-1832-5018-9c6b-cca2dbdfd77a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.118.77.193:60669/bin.sh",
      "pattern": "[url:value = 'http://119.118.77.193:60669/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:49:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d3c38d2-d5a7-56a2-b8e6-f7381810ed50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lvjekhq.penality.bet/bb127361-ea36-4bc5-9514-788b23f562cb",
      "pattern": "[url:value = 'https://lvjekhq.penality.bet/bb127361-ea36-4bc5-9514-788b23f562cb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:34:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7be0754a-da72-5c2b-a712-97214956f63d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://015bj63k.parspoker90.com/?ublib=870158c5-5d05-485a-adbb-5bec80adaa52",
      "pattern": "[url:value = 'https://015bj63k.parspoker90.com/?ublib=870158c5-5d05-485a-adbb-5bec80adaa52']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:29:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94d8aaf0-4ebb-5806-9f96-d0d4b906b064",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.168.50.246:35359/i",
      "pattern": "[url:value = 'http://61.168.50.246:35359/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:19:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--898a4af0-da5b-57a8-b057-84b3d304dc11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.152.95:32815/i",
      "pattern": "[url:value = 'http://115.48.152.95:32815/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:18:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9220d47-a90b-545d-8176-f9537ca6b5a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.40.176:40273/i",
      "pattern": "[url:value = 'http://182.113.40.176:40273/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:06:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1af1c8b-d4f3-51f1-bec1-c1248aab8c6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.237.101.217:49179/i",
      "pattern": "[url:value = 'http://42.237.101.217:49179/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T14:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--970ea34e-d538-55f1-9d4e-c05fd62f829a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rwnkdep.penality.casino/e59b61aa-0941-4d51-b81c-15807c76567b",
      "pattern": "[url:value = 'https://rwnkdep.penality.casino/e59b61aa-0941-4d51-b81c-15807c76567b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:55:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80fbd658-54d0-5c4f-a9be-9c25261fb7f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.47.132:42249/bin.sh",
      "pattern": "[url:value = 'http://182.121.47.132:42249/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:49:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfd97feb-99c2-50d9-93e6-63297ef334cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.152.95:32815/bin.sh",
      "pattern": "[url:value = 'http://115.48.152.95:32815/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:48:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dd57f64-0fac-5315-8faf-f4138b875a6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.240.50:46771/i",
      "pattern": "[url:value = 'http://115.55.240.50:46771/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:30:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c73d1b69-d1b3-52a3-9393-db55b975d1e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.82.148:46455/i",
      "pattern": "[url:value = 'http://42.235.82.148:46455/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f8c0f65-db32-5085-b0a6-8b72a681b8b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.163.157.89:55287/i",
      "pattern": "[url:value = 'http://61.163.157.89:55287/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:28:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c3098e7-cba4-59b4-b1a7-ef2e35305b75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qlggges.penaltibazi.com/e5e72f40-c06f-463e-b46f-663bf44cd51b",
      "pattern": "[url:value = 'https://qlggges.penaltibazi.com/e5e72f40-c06f-463e-b46f-663bf44cd51b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:20:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d41a9fe-ecd7-532f-bb0c-9edb5e289125",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.23.216:41123/i",
      "pattern": "[url:value = 'http://110.36.23.216:41123/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:14:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f140e0c-9508-50f6-a82c-33ca2608cc9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nnunvu.jamjahani.football/7ba965d3-fb60-497a-8ef9-b0f2f7418a9e",
      "pattern": "[url:value = 'https://nnunvu.jamjahani.football/7ba965d3-fb60-497a-8ef9-b0f2f7418a9e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T13:05:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bebd36e-8e32-5ab3-b13f-0a4ee0daa121",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.240.50:46771/bin.sh",
      "pattern": "[url:value = 'http://115.55.240.50:46771/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:58:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c32749ff-77da-5e11-9333-7277a1a99a5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.82.148:46455/bin.sh",
      "pattern": "[url:value = 'http://42.235.82.148:46455/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:58:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06e8fe6c-77af-5eba-a9ed-0058b75f57b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.119.142:41490/i",
      "pattern": "[url:value = 'http://182.126.119.142:41490/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:53:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc9ecdc0-857a-5bf5-80b3-5640c2a1153c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.85.193:42047/i",
      "pattern": "[url:value = 'http://61.52.85.193:42047/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:51:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--679cbbb9-297b-575c-925f-2b96dc38fce2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.119.142:41490/bin.sh",
      "pattern": "[url:value = 'http://182.126.119.142:41490/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--798589c8-20d3-546f-b211-6ec84a9379db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.207.151:43024/i",
      "pattern": "[url:value = 'http://110.38.207.151:43024/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:48:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b754fcbc-e3f7-5510-91be-a6eaebe738c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.47.132:42249/i",
      "pattern": "[url:value = 'http://182.121.47.132:42249/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:47:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36d863e1-b42e-5f1a-b060-002ebbde6263",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wfmbnyx.penalti.bet/98671f9e-5bf3-4fb0-98e6-de7f88f7c832",
      "pattern": "[url:value = 'https://wfmbnyx.penalti.bet/98671f9e-5bf3-4fb0-98e6-de7f88f7c832']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:40:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af6b1ce3-5dac-5e94-8b25-c5a31caffae5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.130.86:43527/i",
      "pattern": "[url:value = 'http://219.155.130.86:43527/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:35:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--473f713b-341f-52fc-8e91-7bb23f1ac32a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.85.193:42047/bin.sh",
      "pattern": "[url:value = 'http://61.52.85.193:42047/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--141974cd-a261-5328-ba8f-e9e6d46438e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.86.177:51820/bin.sh",
      "pattern": "[url:value = 'http://27.215.86.177:51820/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd8de516-b738-5c74-815a-4cf2d09f323b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.7.226.111:34442/bin.sh",
      "pattern": "[url:value = 'http://123.7.226.111:34442/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--570f1ccd-660d-5d14-a7cb-3fc34fe01cd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://et8095ov.parspoker.casino/?ublib=a91364b9-522e-49d2-93d8-96b735508939",
      "pattern": "[url:value = 'https://et8095ov.parspoker.casino/?ublib=a91364b9-522e-49d2-93d8-96b735508939']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:28:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d90e5af-e076-5336-87d5-9c70b4cdc519",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.113.6:50926/i",
      "pattern": "[url:value = 'http://115.56.113.6:50926/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:26:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f6b096f-6428-5071-9b3c-85652bc8d0cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.45.128:49278/i",
      "pattern": "[url:value = 'http://182.113.45.128:49278/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:20:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db570f96-a19b-54b2-b5f3-2be9f2706ea5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.18.105.58:36929/i",
      "pattern": "[url:value = 'http://60.18.105.58:36929/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40fff10f-4654-5b4b-a8fc-ec019ffeaeea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jgjikxq.penalti.website/6fbb2c5e-c064-4b4d-9368-4be6751148e2",
      "pattern": "[url:value = 'https://jgjikxq.penalti.website/6fbb2c5e-c064-4b4d-9368-4be6751148e2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T12:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35276357-e307-506c-b6a3-de1c06bc2b25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.82.69:58121/i",
      "pattern": "[url:value = 'http://27.215.82.69:58121/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d28b1cd-61e7-5c97-8909-f6d374b1a3e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.65.46:51285/i",
      "pattern": "[url:value = 'http://125.42.65.46:51285/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:51:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25850542-7ca0-5bdd-9dfb-d7a5804a9efb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.65.46:51285/bin.sh",
      "pattern": "[url:value = 'http://125.42.65.46:51285/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33b4fa91-1fef-5b27-99e5-eda651f03788",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.194.145:42924/bin.sh",
      "pattern": "[url:value = 'http://123.12.194.145:42924/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:36:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83cf4261-4c58-57d8-b393-9277e9e0540c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.18.105.58:36929/bin.sh",
      "pattern": "[url:value = 'http://60.18.105.58:36929/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:35:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d1e3897-dd81-5659-88d3-37539eefda48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.175.207:40660/i",
      "pattern": "[url:value = 'http://222.134.175.207:40660/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:35:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63ee2746-4002-5edd-9ffc-99c52308c4e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.149.128:42506/bin.sh",
      "pattern": "[url:value = 'http://42.224.149.128:42506/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:32:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11eb2879-099f-59e6-a38e-4aa368e4fa02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.216.134:48643/bin.sh",
      "pattern": "[url:value = 'http://123.14.216.134:48643/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:31:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc9e6356-7e78-5aed-883d-d9d79455c329",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jvlckru.penalty.casino/b4a8efe0-89d6-4be5-b00a-a9e8d2b1fa19",
      "pattern": "[url:value = 'https://jvlckru.penalty.casino/b4a8efe0-89d6-4be5-b00a-a9e8d2b1fa19']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:23:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df6a2e11-8749-5499-9397-5a32100bb3ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.119.153:50658/i",
      "pattern": "[url:value = 'http://110.36.119.153:50658/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:13:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--509382a6-d59e-5b69-8f55-19a121918f7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.224.33:47251/i",
      "pattern": "[url:value = 'http://182.121.224.33:47251/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:13:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b14d40c4-1276-53fd-8253-5dd4f88f8cbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://idwfsf.jamjahani.cash/534a401a-93b5-4ca3-ad5f-b330c036e834",
      "pattern": "[url:value = 'https://idwfsf.jamjahani.cash/534a401a-93b5-4ca3-ad5f-b330c036e834']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--043ef977-4756-57b3-9cb3-26ccff55c12d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.175.207:40660/bin.sh",
      "pattern": "[url:value = 'http://222.134.175.207:40660/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:06:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd7361ab-da6d-51e6-a4e2-d759a7082a19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.192.248:48384/i",
      "pattern": "[url:value = 'http://182.114.192.248:48384/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T11:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65e9aaf3-cbcf-594b-94e1-f3b679b712bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.93.102:60630/i",
      "pattern": "[url:value = 'http://125.41.93.102:60630/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:58:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e61844d7-e1da-5189-b0e1-6682afb0e017",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.12.47:56850/i",
      "pattern": "[url:value = 'http://182.121.12.47:56850/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:57:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d3f3582-4c95-53af-941c-297de1434b3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://et5qogz2.one1xbet.promo/?ublib=279ee61f-f981-456d-a096-5acafd8dcaac",
      "pattern": "[url:value = 'https://et5qogz2.one1xbet.promo/?ublib=279ee61f-f981-456d-a096-5acafd8dcaac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da711ed7-a871-51ed-ac9b-4f680afe904c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm6",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19ba07ba-bfdd-5261-8b56-ab68dfe84ff4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.x86_64",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c093479-b6a3-578b-87b7-a233c3bfe961",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.mpsl",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d04bc187-3bb7-5af5-bdd1-f8c52ef7a1c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm7",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e76d294-0efa-5e47-af15-849655e9d66d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.mips",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--895f68a2-2541-5ff8-a0b2-ae4134391d3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddf465fc-d649-52a9-ab26-e98967e4127f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.x86",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b371d635-46fd-56d1-99c4-195b9f318b01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.i686",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7dc1090-8960-568f-af8f-72ac9dc84bd5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.ppc",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44f15992-2556-536a-b875-87a956b624dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.sh4",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860211/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c04f9eab-c8ca-5950-ac37-623e6e96d44a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm5",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a3fdaa3-e5b4-5aee-bd04-c1716b4bdaa1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.231.70.34/nullnet_bin_dir/nullnet_load.m68k",
      "pattern": "[url:value = 'http://5.231.70.34/nullnet_bin_dir/nullnet_load.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:52:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84e9feab-4b4b-5c69-85dc-23ee422e82b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.239.82.29:52089/i",
      "pattern": "[url:value = 'http://113.239.82.29:52089/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:44:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b8094cc-5075-514b-98fd-ad32c5b34c81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nqbecrh.one1x.bet/b6181c88-838a-4f09-93e1-0b270cb3f5d8",
      "pattern": "[url:value = 'https://nqbecrh.one1x.bet/b6181c88-838a-4f09-93e1-0b270cb3f5d8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:44:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f1939fc-47bf-5616-89bd-2caef39343b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.113.6:50926/bin.sh",
      "pattern": "[url:value = 'http://115.56.113.6:50926/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:41:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce39ce53-a5ab-5732-a116-ffae34d2885b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.58.3.220:52533/bin.sh",
      "pattern": "[url:value = 'http://42.58.3.220:52533/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:37:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--470e0ba4-e826-5ec0-990e-60b6934a38ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.192.248:48384/bin.sh",
      "pattern": "[url:value = 'http://182.114.192.248:48384/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c986fadf-5a4b-5b2e-9691-7b71442e069f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://g2z2cnlz.pascal.casino/?ublib=c599276e-21f7-45c6-beb6-e969c5387732",
      "pattern": "[url:value = 'https://g2z2cnlz.pascal.casino/?ublib=c599276e-21f7-45c6-beb6-e969c5387732']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e14b7c7f-969c-5add-aa77-00b9a9413a88",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://183.214.149.164:56071/bin.sh",
      "pattern": "[url:value = 'http://183.214.149.164:56071/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:22:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac3f28b0-41e3-5590-9958-8358eccf8f48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.180.39.77:49590/bin.sh",
      "pattern": "[url:value = 'http://42.180.39.77:49590/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:07:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99855667-80d4-5917-8fa6-921a0ac23d51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://5bksyseg.betistmobil.com/?ublib=131dc023-5f0f-4c63-8146-9b44c78f4ffe",
      "pattern": "[url:value = 'https://5bksyseg.betistmobil.com/?ublib=131dc023-5f0f-4c63-8146-9b44c78f4ffe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:07:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcef3fee-a8ea-5979-bb0b-2978f42d0d4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zfrfayl.one1xbet.app/c644dd00-5ae8-4919-b959-edcf4004bc46",
      "pattern": "[url:value = 'https://zfrfayl.one1xbet.app/c644dd00-5ae8-4919-b959-edcf4004bc46']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f7726d2-8f35-56e8-8192-6a6444e17633",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://l9tynneu.mybookieiran.com/?ublib=260f10d6-cd0c-4b13-a830-7a9263a7a91d",
      "pattern": "[url:value = 'https://l9tynneu.mybookieiran.com/?ublib=260f10d6-cd0c-4b13-a830-7a9263a7a91d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T10:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c6746c1-1fd0-5164-a56b-a8f907c03ce4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://1.198.198.225:50001/Mozi.m",
      "pattern": "[url:value = 'http://1.198.198.225:50001/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e3494c5-f3ba-5b81-8e3f-6b6076cecb7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.128.243.147:51001/Mozi.m",
      "pattern": "[url:value = 'http://124.128.243.147:51001/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3a77295-1fb2-5aa0-9503-8f9f67072203",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://171.15.88.209:50001/Mozi.m",
      "pattern": "[url:value = 'http://171.15.88.209:50001/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7674431-382f-5b5a-a6f8-376cde81a010",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://171.15.89.112:50001/Mozi.m",
      "pattern": "[url:value = 'http://171.15.89.112:50001/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dd60ac0-2445-5951-9267-e961ec665866",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.127.186.27:45331/Mozi.m",
      "pattern": "[url:value = 'http://222.127.186.27:45331/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8364ae3a-b92e-54be-9e9d-c5c5e09af57e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.99.58.93:1024/Mozi.m",
      "pattern": "[url:value = 'http://62.99.58.93:1024/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--179cc979-a89b-5b4a-ae3b-9b892de4e831",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.114.50:51867/Mozi.m",
      "pattern": "[url:value = 'http://110.37.114.50:51867/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57c06af3-2460-5148-bf79-71a98230971f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.31.247.176:47001/Mozi.m",
      "pattern": "[url:value = 'http://112.31.247.176:47001/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:49:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a2b4fd3-f8b1-5b0e-a273-fb91a4ad30c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.195.70/arm7",
      "pattern": "[url:value = 'http://217.60.195.70/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:46:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5489cfec-ee88-57d1-9086-d64ce8b9c25e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.177.237.25:45204/bin.sh",
      "pattern": "[url:value = 'http://42.177.237.25:45204/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:40:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa15faa9-ae80-56ef-ae40-6322cda00d53",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.63.54.169:58676/i",
      "pattern": "[url:value = 'http://115.63.54.169:58676/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:35:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf423b3a-5cc5-56b7-a7fd-98b5fce41745",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.43:41844/i",
      "pattern": "[url:value = 'http://46.236.65.43:41844/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:30:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--228aa44c-9450-55d0-8a13-86c8c75305a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://a96ampff.mrgreenbetiran.com/?ublib=a20825e3-3765-4452-8dab-4dc098daa8e9",
      "pattern": "[url:value = 'https://a96ampff.mrgreenbetiran.com/?ublib=a20825e3-3765-4452-8dab-4dc098daa8e9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:30:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3691ee7b-16b8-5ffb-a327-9ec7baceb015",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.32.113:34496/bin.sh",
      "pattern": "[url:value = 'http://115.59.32.113:34496/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:28:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--881a464b-ddc0-5df5-aaed-cfa2753ef8f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://avygupe.one1xbet.casino/c5b264cf-f72f-4b43-b207-3e9e1c995b46",
      "pattern": "[url:value = 'https://avygupe.one1xbet.casino/c5b264cf-f72f-4b43-b207-3e9e1c995b46']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:27:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28062197-605c-5b2f-b5de-982686594d46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.174.125.186:34548/i",
      "pattern": "[url:value = 'http://61.174.125.186:34548/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:19:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5455e738-d0b5-5113-9920-30a84281a26a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.39.197:51519/i",
      "pattern": "[url:value = 'http://42.230.39.197:51519/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:17:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5183e86a-b71e-5759-a550-f26554f2fabe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.239.82.29:52089/bin.sh",
      "pattern": "[url:value = 'http://113.239.82.29:52089/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:12:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1178589-79f5-5289-912b-d869b7acc5eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.227.235:58920/bin.sh",
      "pattern": "[url:value = 'http://42.232.227.235:58920/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b91ffada-4c5e-5b3f-a49a-719bca82503f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.63.54.169:58676/bin.sh",
      "pattern": "[url:value = 'http://115.63.54.169:58676/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:06:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddae6431-9003-52f2-a60b-a1c03cde39b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mqbjnx.jamjahani.app/cdd4ea04-c59b-4888-bcbf-97e0e4948680",
      "pattern": "[url:value = 'https://mqbjnx.jamjahani.app/cdd4ea04-c59b-4888-bcbf-97e0e4948680']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T09:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12a79bb5-c450-5d04-b3da-1c534dc0f805",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.54.130:57403/bin.sh",
      "pattern": "[url:value = 'http://182.127.54.130:57403/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:59:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cb16501-d942-5e6c-8c9b-778423a0cabb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.174.125.186:34548/bin.sh",
      "pattern": "[url:value = 'http://61.174.125.186:34548/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:58:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec3ac2e2-457b-5fdf-83a4-eae752f26372",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.215.135:39238/bin.sh",
      "pattern": "[url:value = 'http://219.157.215.135:39238/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:58:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd3ac8f6-227c-5d06-8021-026613dda5e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.134.229:56850/i",
      "pattern": "[url:value = 'http://222.141.134.229:56850/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:56:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ac8865e-3cb2-5372-b59d-9069defdb92d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.43:41844/bin.sh",
      "pattern": "[url:value = 'http://46.236.65.43:41844/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:56:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b043fd4a-4ad2-5cff-abb4-f0a65babaf47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.146.204.245:50287/i",
      "pattern": "[url:value = 'http://175.146.204.245:50287/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:56:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7516d6d3-61c6-596e-a3e1-55c0e39f4b9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.178.149:51055/bin.sh",
      "pattern": "[url:value = 'http://42.227.178.149:51055/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7e9a6f0-5d2e-581a-875b-16eaedbff6f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ilmlvxt.lolsurpriseball.com/3a6f23ae-7a6e-48d6-95ed-b07ca0c9f4f6",
      "pattern": "[url:value = 'https://ilmlvxt.lolsurpriseball.com/3a6f23ae-7a6e-48d6-95ed-b07ca0c9f4f6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:48:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f78ec57-f71b-587f-b115-3df1aab34560",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.10.230:40234/i",
      "pattern": "[url:value = 'http://119.179.10.230:40234/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:44:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--288fa2e1-af50-5c5d-ae4a-dad0b67951a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.237.101.217:49179/bin.sh",
      "pattern": "[url:value = 'http://42.237.101.217:49179/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:41:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3266fba-5245-5bf5-8500-d2c95c650f6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.25.98:55387/i",
      "pattern": "[url:value = 'http://123.12.25.98:55387/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59b38732-9c86-5bc8-a226-7fcffb66da03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.134.229:56850/bin.sh",
      "pattern": "[url:value = 'http://222.141.134.229:56850/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:30:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--166a5277-1291-5d24-aa43-9e78bb121303",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.26.110.10:38787/bin.sh",
      "pattern": "[url:value = 'http://117.26.110.10:38787/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:18:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6fbbcaa-19e3-5e58-b5d0-757f13d7b5e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.39.197:51519/bin.sh",
      "pattern": "[url:value = 'http://42.230.39.197:51519/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:12:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73b48a81-29df-56ab-85fd-b3a667f91ec0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://183.214.149.164:56071/i",
      "pattern": "[url:value = 'http://183.214.149.164:56071/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:10:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e4055da-6d29-54f0-b96b-c884c5ca83c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bvnvrjx.kvbel.com/de8a8b05-2f16-4759-a366-dc4494022705",
      "pattern": "[url:value = 'https://bvnvrjx.kvbel.com/de8a8b05-2f16-4759-a366-dc4494022705']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T08:10:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92d61b27-faab-5dc6-a76a-c4ca99186dda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.144.222:37096/i",
      "pattern": "[url:value = 'http://115.48.144.222:37096/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:59:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccb20546-5781-599c-aba1-a665827134d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/clp3.exe",
      "pattern": "[url:value = 'http://196.251.107.104/clp3.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:50:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6436cf02-3c06-5fd4-a24e-329db7fae42f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.22.86.235:35153/i",
      "pattern": "[url:value = 'http://60.22.86.235:35153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:46:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4714bfd-bbe2-5272-8436-a78b3f4ae2fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.211.59:43083/i",
      "pattern": "[url:value = 'http://115.49.211.59:43083/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:46:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfa77c54-9b8e-571b-98d5-c897056d5c3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hdkkxsm.kbshavanese.com/2d3e461b-ad09-4bda-bb6b-1fc1787b5f36",
      "pattern": "[url:value = 'https://hdkkxsm.kbshavanese.com/2d3e461b-ad09-4bda-bb6b-1fc1787b5f36']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4cdf980-2699-52fc-8fd6-42a43e8fb238",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0ad7d3",
      "pattern": "[url:value = 'http://45.205.1.59/0ad7d3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41cfce57-6de1-5cd4-b93e-06f1f74a447f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.armv4l",
      "pattern": "[url:value = 'http://94.183.188.60/iran.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--282c9bcf-0924-570f-8332-613876fabb4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.mips",
      "pattern": "[url:value = 'http://94.183.188.60/iran.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dd0d152-055b-50f4-8260-d63847494c11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.armv6l",
      "pattern": "[url:value = 'http://94.183.188.60/iran.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d93ca35-771f-56b2-ba5a-1a3da4655f4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/QS2l",
      "pattern": "[url:value = 'http://188.132.232.81/QS2l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6937b787-ba56-5cca-94fb-83ed784a5522",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/dsui",
      "pattern": "[url:value = 'http://188.132.232.81/dsui']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70c4b089-0f07-50d8-b412-40dc16b27385",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/681855",
      "pattern": "[url:value = 'http://45.205.1.59/681855']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d69017bb-7f70-5ec0-9ffc-3a3e30d2d47d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7426b6",
      "pattern": "[url:value = 'http://45.205.1.59/7426b6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dcfea87-e82c-56ec-8eee-05150b9e9fbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ceed67",
      "pattern": "[url:value = 'http://45.205.1.59/ceed67']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b21e11f5-3e38-5ba7-8452-74031110dfd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/c2dba1",
      "pattern": "[url:value = 'http://45.205.1.59/c2dba1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c75c5f6d-308a-5ecf-88d2-50d29712b567",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/39325f",
      "pattern": "[url:value = 'http://45.205.1.59/39325f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29bfb32e-6142-5f9e-b90c-ce1b1ffa9f47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/acecfe",
      "pattern": "[url:value = 'http://45.205.1.59/acecfe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b287ee1-3791-58e8-b26e-0f48d4681c9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0fc7fa",
      "pattern": "[url:value = 'http://45.205.1.59/0fc7fa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f95f053-ef44-5a35-9071-2e21e78efd00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/VoXd",
      "pattern": "[url:value = 'http://188.132.232.81/VoXd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a923972-96cf-5a98-aec8-02019cd9bde7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Y2Jt",
      "pattern": "[url:value = 'http://188.132.232.81/Y2Jt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1761b7b4-9694-5d31-beb7-b8d166f30908",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cd7252",
      "pattern": "[url:value = 'http://45.205.1.59/cd7252']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf064aff-d86a-5e0e-829a-bf6d473ff242",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.arc",
      "pattern": "[url:value = 'http://94.183.188.60/iran.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ad122d3-d355-5b9e-b506-6261c9888ac0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/mqk",
      "pattern": "[url:value = 'http://188.132.232.81/mqk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b69c72e-1994-5588-a6e9-07b35d9bf87e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/cEe",
      "pattern": "[url:value = 'http://188.132.232.81/cEe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3980ee37-b547-5745-891f-1cc39ed1ddda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.armv7l",
      "pattern": "[url:value = 'http://94.183.188.60/iran.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--160bf982-31c3-503e-afad-2f3dbd375d86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.x86_64",
      "pattern": "[url:value = 'http://94.183.188.60/iran.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bff1521a-d928-597c-ba78-8e94254ebf2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/fb7c86",
      "pattern": "[url:value = 'http://45.205.1.59/fb7c86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e51de42-167d-53d1-889b-978c02e03ff1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f16d06",
      "pattern": "[url:value = 'http://45.205.1.59/f16d06']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--747800d8-6af6-5f8f-b240-545fa4f5164b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.sh4",
      "pattern": "[url:value = 'http://94.183.188.60/iran.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--363dfb9e-fe8a-5d81-ad01-c7454ff7ff49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/826e34",
      "pattern": "[url:value = 'http://45.205.1.59/826e34']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e942d19-6210-5e0a-95b2-e887992d21e8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/U8F",
      "pattern": "[url:value = 'http://188.132.232.81/U8F']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb28a041-458c-50ca-a9c4-e655695d6949",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/gsU",
      "pattern": "[url:value = 'http://188.132.232.81/gsU']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--006c1470-8478-5b2e-965b-937e446c1a49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/4qo5",
      "pattern": "[url:value = 'http://188.132.232.81/4qo5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--422a9e56-a5e3-5bb7-87a1-0a740e31d7a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d8e1c9",
      "pattern": "[url:value = 'http://45.205.1.59/d8e1c9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04dc8de4-3112-58ae-bd99-3d7893c2b0c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.aarch64",
      "pattern": "[url:value = 'http://94.183.188.60/iran.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a50f1847-450d-5b43-b38d-2462ff7cd07f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.powerpc",
      "pattern": "[url:value = 'http://94.183.188.60/iran.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c8f05b9-42da-5316-99f9-670d9adb7180",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.m68k",
      "pattern": "[url:value = 'http://94.183.188.60/iran.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fff77e6-1b63-524a-a278-ea36fca5e6e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.armv5l",
      "pattern": "[url:value = 'http://94.183.188.60/iran.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a09e35f-b919-5353-993d-70f4ce3e0f36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.mipsel",
      "pattern": "[url:value = 'http://94.183.188.60/iran.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0353686b-80f0-5fdc-8611-27daaa501cf1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.sparc",
      "pattern": "[url:value = 'http://94.183.188.60/iran.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b34ec13c-3f46-540e-8b14-142c4c4c089e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/TIo",
      "pattern": "[url:value = 'http://188.132.232.81/TIo']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dbf8fbb-4a0e-57ba-820e-868ff6677b84",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/kKhH",
      "pattern": "[url:value = 'http://188.132.232.81/kKhH']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbf5f612-cce9-5c7d-829f-db7cd3f7bfe0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Xny",
      "pattern": "[url:value = 'http://188.132.232.81/Xny']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f21dfce-1cce-55da-9c00-1d35b8463d5e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/8V4s",
      "pattern": "[url:value = 'http://188.132.232.81/8V4s']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad24394b-01fe-5354-a046-04a5bb60ffa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/kzp",
      "pattern": "[url:value = 'http://188.132.232.81/kzp']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df9b6489-6841-5dd8-8670-ff427f032ce3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/MTkZ",
      "pattern": "[url:value = 'http://188.132.232.81/MTkZ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afe72dc7-f3aa-56e0-99f3-6906a1ac5fc7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/SGJB",
      "pattern": "[url:value = 'http://188.132.232.81/SGJB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--862a5a74-ade0-5da2-8849-321ccf3d48cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/kMg",
      "pattern": "[url:value = 'http://188.132.232.81/kMg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4ee068e-ff72-57d7-963c-cde3433469a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/8NaT",
      "pattern": "[url:value = 'http://188.132.232.81/8NaT']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5faf0ae6-ffd6-5628-a274-1b01ba3868ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/iran.i486",
      "pattern": "[url:value = 'http://94.183.188.60/iran.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7766eed8-a1f3-5b7d-bf5c-e43333671bb9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/pp8",
      "pattern": "[url:value = 'http://188.132.232.81/pp8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1bd8b0c-d3ad-516c-8846-dd05d58129d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f5fab3",
      "pattern": "[url:value = 'http://45.205.1.59/f5fab3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea86aca6-6e75-5aac-88f1-170ebbf3c6be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/79a888",
      "pattern": "[url:value = 'http://45.205.1.59/79a888']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5493c998-2fa8-5be8-b7f4-b0b97d7fb8f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ae77ea",
      "pattern": "[url:value = 'http://45.205.1.59/ae77ea']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd749a0a-2331-50f1-b688-314c75236e89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/9c38d8",
      "pattern": "[url:value = 'http://45.205.1.59/9c38d8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4723e95c-5ee2-5a4c-a378-9085158c100d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/df8af8",
      "pattern": "[url:value = 'http://45.205.1.59/df8af8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed900ff0-7199-5e72-9776-c0ae9dc514ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/7RwI",
      "pattern": "[url:value = 'http://188.132.232.81/7RwI']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad4023c4-8e5b-55cb-9162-79f3a8933368",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Hzl",
      "pattern": "[url:value = 'http://188.132.232.81/Hzl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b11c4c75-2832-5d88-8482-9ada3709eacd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/zm1",
      "pattern": "[url:value = 'http://188.132.232.81/zm1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0488e5d5-7750-59db-92ba-f175fe0956be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://3mm5jtvt.mrbet90.com/?ublib=ab5db335-9239-4c22-8dad-68ea00f854b9",
      "pattern": "[url:value = 'https://3mm5jtvt.mrbet90.com/?ublib=ab5db335-9239-4c22-8dad-68ea00f854b9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c078d329-3557-56b8-a76c-b4a9ff414662",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/667d8b",
      "pattern": "[url:value = 'http://45.205.1.59/667d8b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6276d816-92e6-5307-a231-a97f7e1d5c17",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/fb8949",
      "pattern": "[url:value = 'http://45.205.1.59/fb8949']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00004790-272a-56b2-b99e-efc6cb25fe3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ca9cf8",
      "pattern": "[url:value = 'http://45.205.1.59/ca9cf8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16fe7d50-2027-50fe-984d-6ce0b30b0abf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/e3G",
      "pattern": "[url:value = 'http://188.132.232.81/e3G']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d1e612c-38e4-5df7-b46b-311e9b65537f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/xQx",
      "pattern": "[url:value = 'http://188.132.232.81/xQx']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8617083e-f1c0-5f7b-a2c1-6ee3e4648e8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/98b918",
      "pattern": "[url:value = 'http://45.205.1.59/98b918']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c78fd89-c05a-5e75-b7fc-56c37e0fb943",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/V41",
      "pattern": "[url:value = 'http://188.132.232.81/V41']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5348d9e3-039d-54d9-9fc1-dc476c8914cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8e15a8",
      "pattern": "[url:value = 'http://45.205.1.59/8e15a8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--802056db-b0da-56af-bf4a-91bd6635ad0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0a2126",
      "pattern": "[url:value = 'http://45.205.1.59/0a2126']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:30:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02c2e576-384c-5cc5-bd1f-09ad22b3d9b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://inini.kesug.com/aes.js",
      "pattern": "[url:value = 'http://inini.kesug.com/aes.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:29:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37c5f4d4-0419-56c2-a2b7-4a99527386fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.255.26.174:35062/Mozi.m",
      "pattern": "[url:value = 'http://72.255.26.174:35062/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e5f9b5e-2ef4-595e-8987-1f76e6c63ff7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://139.135.40.121:46539/Mozi.a",
      "pattern": "[url:value = 'http://139.135.40.121:46539/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d5303d7-f28a-57fd-ba65-af950a6f1a5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://223.123.42.233:38032/Mozi.m",
      "pattern": "[url:value = 'http://223.123.42.233:38032/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abd59714-53a6-5d1d-bc2a-ab2026a86de8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://192.168.10.100/msmq/private",
      "pattern": "[url:value = 'http://192.168.10.100/msmq/private']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba0d2d7a-f07f-5451-866c-d84ef611b129",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://144.48.132.184:51311/Mozi.m",
      "pattern": "[url:value = 'http://144.48.132.184:51311/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bdb7747-4707-5a18-86df-b071d62df03d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.102.4.135:60271/Mozi.a",
      "pattern": "[url:value = 'http://117.102.4.135:60271/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a951688-b14c-5cfa-8045-b2769fcb3e24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://git.nightcord.ru/nightcord/nightcord/releases/download/v1.18.5/Nightcord-Installer.exe",
      "pattern": "[url:value = 'https://git.nightcord.ru/nightcord/nightcord/releases/download/v1.18.5/Nightcord-Installer.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6c95fb2-f2fe-5c81-b5eb-32190f16a9d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.209.11.121:60859/Mozi.a",
      "pattern": "[url:value = 'http://117.209.11.121:60859/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e85326b3-f90d-5d83-aedd-02a3c902d54c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.188.60/peylood.sh",
      "pattern": "[url:value = 'http://94.183.188.60/peylood.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860079/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ef85e43-2b8b-51ae-bb6d-cff5d56bd77b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_x86_64",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860080/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e94ba61-7e9b-5cd2-ae0e-2c43444c233e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_arm64",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_arm64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ec2463a-0482-5c27-b7f7-f36e9e9a1931",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://video-dtp6.vercel.app/?download=1",
      "pattern": "[url:value = 'https://video-dtp6.vercel.app/?download=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20875608-1dca-54c5-bd22-0e521efcaf14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_arm_static",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_arm_static']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860072/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b92918c7-5125-57e7-b911-813bc5a767da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_arm",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860073/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d117c6b-0ba5-5b5d-9cd8-4dae78a882cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_arm_fixed",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_arm_fixed']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860074/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7dca005-ac31-5fc9-b69f-f349363a8260",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/r",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/r']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860075/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2e5d040-f766-53bd-8263-950cbdbbbd7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_mips",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860076/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--558ae0c9-c2fb-5799-a613-2cd8e899f98c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_arm_fresh",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_arm_fresh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860077/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--012349a7-8738-5f64-9a82-b02b6a3ae823",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.41:8888/bot_mipsel",
      "pattern": "[url:value = 'http://176.65.139.41:8888/bot_mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860078/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99f50ac1-f807-5690-bf2f-6111f34970ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.dropbox.com/scl/fi/q9va341j9hb9wh2h192jn/QuietEcho-Installer.exe?rlkey=z9twkuzypibnfxv0h6o6nbecc&st=m2yf1d8i&dl=1",
      "pattern": "[url:value = 'https://www.dropbox.com/scl/fi/q9va341j9hb9wh2h192jn/QuietEcho-Installer.exe?rlkey=z9twkuzypibnfxv0h6o6nbecc&st=m2yf1d8i&dl=1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860071/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b685ed8a-270f-5fc3-9517-70caadea2136",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://194.36.88.178/loader.sh",
      "pattern": "[url:value = 'http://194.36.88.178/loader.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860069/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3088a93d-78c5-5cd8-be9c-b4c4e53efc70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://194.36.88.178/bins",
      "pattern": "[url:value = 'http://194.36.88.178/bins']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860070/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4834feab-6580-5e28-90c7-cb2c7700cb89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.26.164:51996/Mozi.a",
      "pattern": "[url:value = 'http://110.36.26.164:51996/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860067/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94b912a3-3197-54a1-b881-c1138e937dd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/kozak.sh",
      "pattern": "[url:value = 'http://45.202.246.143/kozak.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:24:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860068/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa1a155a-72aa-5ff5-8962-bacc99d007fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/lala.png",
      "pattern": "[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/lala.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860066/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dee0b3d-b653-5482-bc19-e4b019287c47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/HnDvE",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/HnDvE']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:23:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860065/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c71716d6-e5b0-5843-9b70-82c65714c03f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.219.201:54922/i",
      "pattern": "[url:value = 'http://42.228.219.201:54922/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:19:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860064/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4777ea04-952a-5a31-bf77-cfb5ac6a32b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.120.40.176:36531/i",
      "pattern": "[url:value = 'http://182.120.40.176:36531/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:11:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860063/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5b9e44a-bea7-5491-97b0-994019c8924d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.120.40.176:36531/bin.sh",
      "pattern": "[url:value = 'http://182.120.40.176:36531/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:10:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860062/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41d3631e-b912-5993-a148-c9b92d701345",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.84.113.80:60304/bin.sh",
      "pattern": "[url:value = 'http://36.84.113.80:60304/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:05:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860061/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6489ba62-fadd-58ad-b6a6-00cd35443bc8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lbgkfp.jamjahani2026.football/d7190d09-9239-409a-bb23-be772edd957a",
      "pattern": "[url:value = 'https://lbgkfp.jamjahani2026.football/d7190d09-9239-409a-bb23-be772edd957a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:02:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860060/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac4252c4-d970-5545-805a-6465ca04b391",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.219.201:54922/bin.sh",
      "pattern": "[url:value = 'http://42.228.219.201:54922/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T07:00:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860059/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69fa1987-0fc0-57f7-ad91-ad181d9d1af6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://boixyye.jogodobicho.games/16324857-3fa6-4c3a-b2c4-063c4e8b74d0",
      "pattern": "[url:value = 'https://boixyye.jogodobicho.games/16324857-3fa6-4c3a-b2c4-063c4e8b74d0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T06:53:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860058/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--674233b5-3665-5495-a426-c018cda60abb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.12.61:39507/bin.sh",
      "pattern": "[url:value = 'http://110.36.12.61:39507/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T06:51:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860057/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bfbe931-1f1f-59bd-8293-fa6df5529b7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.149.111.45:36110/bin.sh",
      "pattern": "[url:value = 'http://175.149.111.45:36110/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T06:50:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860056/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af245c14-af95-5c29-81d6-9da44e6c2621",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://yxjmsvr.jamjahani.world/f7cd146c-d837-4d65-a850-1a3fe09a6a34",
      "pattern": "[url:value = 'https://yxjmsvr.jamjahani.world/f7cd146c-d837-4d65-a850-1a3fe09a6a34']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T06:19:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860055/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95d0f27b-c90a-598e-a09c-bf094be53162",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.216.134:48643/i",
      "pattern": "[url:value = 'http://123.14.216.134:48643/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T06:14:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860054/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d776bc73-c7ec-5444-a024-308a5531ee8b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.163.128.202:37708/bin.sh",
      "pattern": "[url:value = 'http://61.163.128.202:37708/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T06:08:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860053/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb1c0e02-559e-5e3c-bcd8-e261ad4c3d7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.42:53624/i",
      "pattern": "[url:value = 'http://163.142.92.42:53624/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T06:07:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860052/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95d0345b-7087-51cf-8a98-d71ff7b220db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.6.34.82:51411/i",
      "pattern": "[url:value = 'http://42.6.34.82:51411/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:56:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860051/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd08c193-1419-5c53-ad32-326fa919d86f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.139.40.4:41545/i",
      "pattern": "[url:value = 'http://222.139.40.4:41545/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:51:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860050/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b30f1e2-d244-5b5f-954e-b7aa8f3a8d32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.78.150:48153/i",
      "pattern": "[url:value = 'http://125.42.78.150:48153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:49:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860049/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37fad136-d72c-5edf-9d88-bb98d0d94c83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.5.137:43170/i",
      "pattern": "[url:value = 'http://115.55.5.137:43170/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860048/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2861f191-306a-5f86-b088-0eb674c4303a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ugmitqk.one1xbet.poker/5bf77700-2d9d-4b34-b89e-ad2c14d7d7de",
      "pattern": "[url:value = 'https://ugmitqk.one1xbet.poker/5bf77700-2d9d-4b34-b89e-ad2c14d7d7de']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:36:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860047/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--181bf84f-9675-5007-8be4-2041329572dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qtcfxojh.mostbetresmi.site/?ublib=2b41fa2d-31cc-4dd5-95b6-555f1ebbfd2d",
      "pattern": "[url:value = 'https://qtcfxojh.mostbetresmi.site/?ublib=2b41fa2d-31cc-4dd5-95b6-555f1ebbfd2d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860046/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--757c7f5b-0424-52be-b2ea-931e284a3ff6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.6.34.82:51411/bin.sh",
      "pattern": "[url:value = 'http://42.6.34.82:51411/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:27:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860045/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c8a2f48-8908-594e-aa78-f22d0047b5c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.78.150:48153/bin.sh",
      "pattern": "[url:value = 'http://125.42.78.150:48153/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:21:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860044/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59c5eefc-5842-5e7b-af2e-0178b6ed2029",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.123:50746/bin.sh",
      "pattern": "[url:value = 'http://163.142.92.123:50746/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:18:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860043/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db6e8f65-f3f6-5027-80d8-5d1c732b46c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://2dz4gggg.betgopro.com/?ublib=65a395a2-ed30-491a-9528-6d7d37c8ba75",
      "pattern": "[url:value = 'https://2dz4gggg.betgopro.com/?ublib=65a395a2-ed30-491a-9528-6d7d37c8ba75']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:06:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860042/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13700ea3-f146-5e32-84a7-21761da41e2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://avhbto.yasbet90.com/ba8f0815-43ef-4990-a0cb-3c11b1e50937",
      "pattern": "[url:value = 'https://avhbto.yasbet90.com/ba8f0815-43ef-4990-a0cb-3c11b1e50937']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860041/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8b51a12-bc0e-549d-bbcb-f1c41f6dc4da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.188.117:46906/i",
      "pattern": "[url:value = 'http://112.248.188.117:46906/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:04:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860040/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c2927ec-34c1-5cb2-882a-42655bc5a331",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.5.137:43170/bin.sh",
      "pattern": "[url:value = 'http://115.55.5.137:43170/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T05:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860039/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acbe47ce-55aa-53f6-b861-baf77e131952",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://aarcyyo.one1xbet.net/de73dd2e-9f5e-46ff-8a42-9ea8257f8e93",
      "pattern": "[url:value = 'https://aarcyyo.one1xbet.net/de73dd2e-9f5e-46ff-8a42-9ea8257f8e93']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:58:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860038/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a9081bc-6c2d-5647-9715-df5ed48b0be5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.16.245:36286/i",
      "pattern": "[url:value = 'http://125.44.16.245:36286/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:52:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860037/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76138735-9442-56ca-bf07-5681e5d5eead",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.162.135:48606/i",
      "pattern": "[url:value = 'http://115.48.162.135:48606/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:47:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860036/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de4cbb60-580c-5f4a-be75-fe18afb0bb26",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.19.51:50754/bin.sh",
      "pattern": "[url:value = 'http://110.36.19.51:50754/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:46:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860035/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fee36bb3-5f6a-592c-a332-38685a7a4e9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.87.182:42337/i",
      "pattern": "[url:value = 'http://115.55.87.182:42337/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860034/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad245f33-609d-5421-8283-dd5ee361da40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.188.117:46906/bin.sh",
      "pattern": "[url:value = 'http://112.248.188.117:46906/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:37:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860033/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f427baa0-f74a-5495-b602-4df70f6ce74c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.52.201.30:43700/bin.sh",
      "pattern": "[url:value = 'http://42.52.201.30:43700/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:28:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860032/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32244cca-dd45-5ab9-96ad-5eb501fb1887",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.162.135:48606/bin.sh",
      "pattern": "[url:value = 'http://115.48.162.135:48606/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:24:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860031/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21c36b58-5981-5118-92d4-f657039201df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.10.230:40234/bin.sh",
      "pattern": "[url:value = 'http://119.179.10.230:40234/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:24:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860030/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e151c22d-88ea-5e9b-9352-73489fb4a350",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.227.235:58920/i",
      "pattern": "[url:value = 'http://42.232.227.235:58920/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:23:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860029/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16b751c6-78cc-579a-ac6a-d0de401c4b43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jrnxmey.one1xbet.casino/b60c3f32-2383-45cd-8274-cd7e3f71e4e0",
      "pattern": "[url:value = 'https://jrnxmey.one1xbet.casino/b60c3f32-2383-45cd-8274-cd7e3f71e4e0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:20:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860028/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc59ebdf-44ed-5782-9040-8fa7424f3740",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.87.182:42337/bin.sh",
      "pattern": "[url:value = 'http://115.55.87.182:42337/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:16:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860027/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2889b3e1-9569-50dd-99a1-6d501534a1d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/payload.xml",
      "pattern": "[url:value = 'http://45.202.246.143/bins/payload.xml']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:15:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860026/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72ee5e1a-7ad3-5c77-a4d6-810fc205e9fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.6.120:56557/i",
      "pattern": "[url:value = 'http://115.49.6.120:56557/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:08:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860025/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13d9deb6-9197-5ae8-9200-ba45b02dd531",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.150.0:49407/i",
      "pattern": "[url:value = 'http://222.138.150.0:49407/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T04:02:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860024/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a29f179-c3c5-536f-bceb-f93745a158cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.152.161:33578/i",
      "pattern": "[url:value = 'http://182.121.152.161:33578/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:50:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860023/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4ecc64f-9398-5a72-9fb9-86a3c328e455",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.6.120:56557/bin.sh",
      "pattern": "[url:value = 'http://115.49.6.120:56557/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:44:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860022/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fa239e2-4a39-56d0-87b3-875f15699d8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lzsmmza.one1xbet.app/873d87cd-f773-42a6-9fdf-5e00d752f321",
      "pattern": "[url:value = 'https://lzsmmza.one1xbet.app/873d87cd-f773-42a6-9fdf-5e00d752f321']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:40:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860021/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3aa9674-9b81-54bb-a01e-6517b9790770",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.239.225.26:35509/i",
      "pattern": "[url:value = 'http://42.239.225.26:35509/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:37:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860020/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2e66dd4-b945-5193-b6a0-b9726b7dbd2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.152.161:33578/bin.sh",
      "pattern": "[url:value = 'http://182.121.152.161:33578/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:29:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860019/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce1dfbca-0223-5481-ab8f-c9dbeee6bc00",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://efd7fi03.monti.bet/?ublib=a65d272e-a669-40fb-b1b7-8fda9c67da91",
      "pattern": "[url:value = 'https://efd7fi03.monti.bet/?ublib=a65d272e-a669-40fb-b1b7-8fda9c67da91']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:29:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860018/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da71a9d5-00ce-503f-87b8-cc92fc70a433",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.7.155.123:39097/bin.sh",
      "pattern": "[url:value = 'http://123.7.155.123:39097/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860017/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--476107ca-c503-5208-9956-b19bb149f8e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.54.130:57403/i",
      "pattern": "[url:value = 'http://182.127.54.130:57403/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:26:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860016/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1a450fb-0f7e-5aa9-982c-ccd620c8bdbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.78.17:59660/bin.sh",
      "pattern": "[url:value = 'http://163.142.78.17:59660/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:17:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860015/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cde705e-7ef8-5842-9fd6-495c2a1a247a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.54.102.62:52153/i",
      "pattern": "[url:value = 'http://115.54.102.62:52153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:13:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860014/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec38d7f-8c30-5956-9ef9-0bd97cb610e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.239.225.26:35509/bin.sh",
      "pattern": "[url:value = 'http://42.239.225.26:35509/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:10:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860013/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--765d7c54-a128-5460-9d9f-4d469029c56e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://66.131.243.81:34952/i",
      "pattern": "[url:value = 'http://66.131.243.81:34952/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:09:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860012/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57dba9c4-300c-5f4c-855e-e75f22885fd1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.163.128.202:37708/i",
      "pattern": "[url:value = 'http://61.163.128.202:37708/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860011/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06ba0ab1-70eb-5fbb-8a5b-cc83d8ab7c3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b3a549",
      "pattern": "[url:value = 'http://45.205.1.59/b3a549']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860000/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--041770e2-323b-5fb8-bc50-a4e3a0fab16a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a074d3",
      "pattern": "[url:value = 'http://45.205.1.59/a074d3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860001/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--080fc229-9469-5d9c-b552-25dd1f567db6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/334ee6",
      "pattern": "[url:value = 'http://45.205.1.59/334ee6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860002/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1101391f-9219-522c-9ee5-3aaf46499b48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6858bf",
      "pattern": "[url:value = 'http://45.205.1.59/6858bf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860003/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90226c7b-e861-5564-8d53-cd30bd355134",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7a8be6",
      "pattern": "[url:value = 'http://45.205.1.59/7a8be6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860004/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d344677-0a17-5465-94a8-11b564313002",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d7045c",
      "pattern": "[url:value = 'http://45.205.1.59/d7045c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860005/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--941f58fc-34c7-58f9-99ac-f1f8597e74dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b37590",
      "pattern": "[url:value = 'http://45.205.1.59/b37590']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860006/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--431c5c80-921a-5a11-bfcf-70f54a944174",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a78fa8",
      "pattern": "[url:value = 'http://45.205.1.59/a78fa8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860007/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f39ddf7-3a60-51ea-ae3e-0bdf062b455c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5093cc",
      "pattern": "[url:value = 'http://45.205.1.59/5093cc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860008/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--391874c4-7c7c-5606-9254-beec67f75921",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/080095",
      "pattern": "[url:value = 'http://45.205.1.59/080095']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860009/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bc809e2-d281-51fe-aa4e-50f6a86c79a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/10dbbe",
      "pattern": "[url:value = 'http://45.205.1.59/10dbbe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3860010/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ede42a41-c103-56a2-9753-1359f91f5aa0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/dd4e2d",
      "pattern": "[url:value = 'http://45.205.1.59/dd4e2d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859999/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31f61cfb-3f7f-51a3-a93c-5120e523b972",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lfrzjdk.one1x.bet/70136de2-bfe8-485d-94a5-53ad7c65dd68",
      "pattern": "[url:value = 'https://lfrzjdk.one1x.bet/70136de2-bfe8-485d-94a5-53ad7c65dd68']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859998/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5115345-18f0-57e9-a03e-796f15c90996",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2ba3d6",
      "pattern": "[url:value = 'http://45.205.1.59/2ba3d6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859993/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--691ae4be-d30d-56c7-8551-8775f7645354",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/0f2b87",
      "pattern": "[url:value = 'http://45.205.1.59/0f2b87']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859994/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce9710e1-20b2-57ae-8e03-5b2e8233f7ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/6e1f3b",
      "pattern": "[url:value = 'http://45.205.1.59/6e1f3b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859995/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5545c1e-65ea-58b2-8f48-47dc311ffe87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/14595b",
      "pattern": "[url:value = 'http://45.205.1.59/14595b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859996/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--085fefda-9733-531f-bb5d-97b33fca07b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/e4f499",
      "pattern": "[url:value = 'http://45.205.1.59/e4f499']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859997/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57a3f8f2-4fda-5f55-8de4-40c31da7b4d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d884f4",
      "pattern": "[url:value = 'http://45.205.1.59/d884f4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859986/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fdd2049-32e5-513f-9592-6ec3f9ef1c8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/df559d",
      "pattern": "[url:value = 'http://45.205.1.59/df559d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859987/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa1ce853-0a62-53b1-a840-6e9bee721fdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/35a72c",
      "pattern": "[url:value = 'http://45.205.1.59/35a72c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859988/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72dd40e6-05a2-5197-a372-ccb913adbea2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/bcd92d",
      "pattern": "[url:value = 'http://45.205.1.59/bcd92d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859989/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--170efd5a-e8a0-5c5f-833f-e0b74179f40e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/88e688",
      "pattern": "[url:value = 'http://45.205.1.59/88e688']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859990/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3c05a80-9ac6-569a-b6f0-0caf5cb7e8f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/a9c0ff",
      "pattern": "[url:value = 'http://45.205.1.59/a9c0ff']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859991/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a19b2cb9-e53d-5a0f-b504-ce64f4332df6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/58c16c",
      "pattern": "[url:value = 'http://45.205.1.59/58c16c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859992/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87f9e954-6edc-5ed2-8826-31f75130a104",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.83.193:35428/bin.sh",
      "pattern": "[url:value = 'http://42.232.83.193:35428/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859985/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81b80172-86be-51a7-88a1-561ceb193970",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ivqivx.xenicalby6.com/47aec57c-ddba-4761-9fe8-dad5a5a70aa5",
      "pattern": "[url:value = 'https://ivqivx.xenicalby6.com/47aec57c-ddba-4761-9fe8-dad5a5a70aa5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T03:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859984/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72024a49-f4c7-56bb-9385-c2098024ce06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://159.255.20.177:47224/bin.sh",
      "pattern": "[url:value = 'http://159.255.20.177:47224/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:57:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859983/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9db0775c-77c7-5266-86fa-6e9930114f96",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.201.196:50911/bin.sh",
      "pattern": "[url:value = 'http://110.38.201.196:50911/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:52:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859982/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb9aebdd-c2e4-50df-bb04-bc966b5d331a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/d25c86",
      "pattern": "[url:value = 'http://45.205.1.59/d25c86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:51:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859980/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64819f20-649a-52a4-940f-e8e93a0715ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.229.188:52695/i",
      "pattern": "[url:value = 'http://110.39.229.188:52695/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:51:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859981/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba88ac7a-a0a2-5428-96f8-fcd5b459d854",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/fdfaaa",
      "pattern": "[url:value = 'http://45.205.1.59/fdfaaa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:51:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859979/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da5f258c-f741-5283-b61c-6a317746542b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/720d02",
      "pattern": "[url:value = 'http://45.205.1.59/720d02']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859975/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eeed808-6d8e-54bb-8ae5-4c8945baf189",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/5487dd",
      "pattern": "[url:value = 'http://45.205.1.59/5487dd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859976/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02b0ccd3-3140-5b59-84d6-5fe36f2342bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/673af7",
      "pattern": "[url:value = 'http://45.205.1.59/673af7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859977/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a68fd0cf-cf1c-5e7f-b6f7-a7e71e875965",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/b9d746",
      "pattern": "[url:value = 'http://45.205.1.59/b9d746']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859978/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e31317c2-bf50-5f94-98eb-f702305c15dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/675b5b",
      "pattern": "[url:value = 'http://45.205.1.59/675b5b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859969/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ce4b9f3-89db-561b-a22a-ce7d47923024",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/3e0f1c",
      "pattern": "[url:value = 'http://45.205.1.59/3e0f1c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859970/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1e88151-3bad-5826-b027-b9756fdc2ca8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1e2d72",
      "pattern": "[url:value = 'http://45.205.1.59/1e2d72']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859971/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6ef0674-253d-5d62-bee6-3263e65042dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8de3f4",
      "pattern": "[url:value = 'http://45.205.1.59/8de3f4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859972/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9214cdcd-1176-51e0-9d7c-1c128cc1f9b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8f75ac",
      "pattern": "[url:value = 'http://45.205.1.59/8f75ac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859973/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68f314ec-c4e6-52cc-97b4-6192fce7d247",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/66c858",
      "pattern": "[url:value = 'http://45.205.1.59/66c858']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:50:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859974/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c521028c-2cce-530f-9ddd-ca71d458b31c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.54.102.62:52153/bin.sh",
      "pattern": "[url:value = 'http://115.54.102.62:52153/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:48:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859968/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8e000e8-1e4d-57fa-b87f-99ea881d4c9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.4.242:47413/i",
      "pattern": "[url:value = 'http://125.41.4.242:47413/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:46:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859967/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e62c6a7b-6d68-5545-a7fb-ad276478022f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://66.131.243.81:34952/bin.sh",
      "pattern": "[url:value = 'http://66.131.243.81:34952/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:43:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859966/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e214527-286b-5bf9-867b-fd1e7874304f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.229.188:52695/bin.sh",
      "pattern": "[url:value = 'http://110.39.229.188:52695/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859965/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b86f2f25-da5b-5a8e-9cc2-77f89fedd966",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.115.4:38631/i",
      "pattern": "[url:value = 'http://182.121.115.4:38631/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:36:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859964/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b33c5261-f014-57a5-b93c-2744ca155dcb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.4.242:47413/bin.sh",
      "pattern": "[url:value = 'http://125.41.4.242:47413/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:32:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859963/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--850efe3c-8dfa-572d-b842-d3fbd4f37f11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.161.160:52080/i",
      "pattern": "[url:value = 'http://123.4.161.160:52080/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859962/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cfaf793-9b78-58c7-89c3-01812f37f51a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.115.4:38631/bin.sh",
      "pattern": "[url:value = 'http://182.121.115.4:38631/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:30:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859961/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af778d29-bb6d-52b3-b342-223b15c8eae7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.81.71:41436/i",
      "pattern": "[url:value = 'http://110.36.81.71:41436/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:24:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859960/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6519e20-3d1d-5b0b-b16d-b4916680534a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://njhhbmh.olabahiskayit.com/26acf26c-05d0-4436-bdfc-307add057ee8",
      "pattern": "[url:value = 'https://njhhbmh.olabahiskayit.com/26acf26c-05d0-4436-bdfc-307add057ee8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:23:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859959/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73b023ed-f5ea-54a1-9fea-1efcd6341b1d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.138.211:34657/bin.sh",
      "pattern": "[url:value = 'http://115.49.138.211:34657/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:16:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859958/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcf87a40-f36c-5a5f-b2e7-eb4b2198b9a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.127.48.44:33584/i",
      "pattern": "[url:value = 'http://222.127.48.44:33584/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:05:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859957/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf298805-7f0d-5a8c-b66c-adaaf70b4e1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.139.40.4:41545/bin.sh",
      "pattern": "[url:value = 'http://222.139.40.4:41545/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T02:01:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859956/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dbfd98d-867f-5265-8440-970308fc7ba4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gqmalnx.ogwil.bet/41b122fa-1187-4e24-a89c-889d6a7c113a",
      "pattern": "[url:value = 'https://gqmalnx.ogwil.bet/41b122fa-1187-4e24-a89c-889d6a7c113a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:48:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859955/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--132d621b-25f0-5f62-baad-bdac5ef3d149",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.241:43031/i",
      "pattern": "[url:value = 'http://163.142.92.241:43031/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:43:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859954/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50bdb3d0-e84b-570a-a965-ce83ad64e7d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.127.48.44:33584/bin.sh",
      "pattern": "[url:value = 'http://222.127.48.44:33584/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:39:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859953/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11c9720d-3d5d-56b7-ba24-02e77a31a65f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://60hx33ds.minescasino.bet/?ublib=33e08c1f-75a1-42e1-867a-9c4656db7337",
      "pattern": "[url:value = 'https://60hx33ds.minescasino.bet/?ublib=33e08c1f-75a1-42e1-867a-9c4656db7337']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:29:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859952/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fb95db7-fabf-5a1f-9cd4-04f8d2a443f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.81.71:41436/bin.sh",
      "pattern": "[url:value = 'http://110.36.81.71:41436/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:26:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859951/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc619700-51bb-517e-aa83-d2a669e00e96",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.177.237.25:45204/i",
      "pattern": "[url:value = 'http://42.177.237.25:45204/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:14:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859950/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9736f728-2d69-535b-8b66-1040c804a125",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.23.233.177:43595/i",
      "pattern": "[url:value = 'http://60.23.233.177:43595/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859949/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0039102d-a522-5f0e-9f98-90e197cce5b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://geovin.bet404farsi.com/a93a8f62-e5c6-4c84-8307-4f9f3e58f4c4",
      "pattern": "[url:value = 'https://geovin.bet404farsi.com/a93a8f62-e5c6-4c84-8307-4f9f3e58f4c4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:05:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859948/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24e18984-8ec0-5088-a1c7-a5094a9e3844",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kvzkqjf.ninjafruitcubes.bet/fea916ac-f93f-47f6-a043-64478ff162d2",
      "pattern": "[url:value = 'https://kvzkqjf.ninjafruitcubes.bet/fea916ac-f93f-47f6-a043-64478ff162d2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T01:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859947/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c5ad125-2f34-5dde-b8c3-b07f5a9d9f39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.207.186.37:47926/bin.sh",
      "pattern": "[url:value = 'http://27.207.186.37:47926/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859946/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4a10e31-c19a-5da7-b6df-5d4af7310406",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.93.155:58905/bin.sh",
      "pattern": "[url:value = 'http://163.142.93.155:58905/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:55:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859945/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e049d0a-3cb6-508a-b73c-25b215b39d9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.93.23:53751/i",
      "pattern": "[url:value = 'http://163.142.93.23:53751/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859944/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d89649b8-060a-51e0-b68a-b85db9cec71a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.0.119:51311/i",
      "pattern": "[url:value = 'http://182.113.0.119:51311/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:47:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859943/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddcc3a4e-9066-50f9-9566-d38a40bc7228",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.23.233.177:43595/bin.sh",
      "pattern": "[url:value = 'http://60.23.233.177:43595/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:41:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859942/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd646dbe-a08e-511d-be4c-0de56b82725a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.240.76:44861/i",
      "pattern": "[url:value = 'http://123.9.240.76:44861/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859940/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27e3b173-d199-590c-9619-21029427825f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.83.193:35428/i",
      "pattern": "[url:value = 'http://42.232.83.193:35428/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859941/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3dc4b0a-dc52-5bdb-9345-1905396b119a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.123:50746/i",
      "pattern": "[url:value = 'http://163.142.92.123:50746/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:29:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859939/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b1e3345-5be6-5ccc-b9e5-dcec56605fff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.123.243.227:36814/i",
      "pattern": "[url:value = 'http://182.123.243.227:36814/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:23:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859938/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fe77b68-a204-5e86-818f-18ffd4363944",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.123.243.227:36814/bin.sh",
      "pattern": "[url:value = 'http://182.123.243.227:36814/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:22:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859937/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b080f2f1-e1d2-586a-8115-786fb089a02e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.0.119:51311/bin.sh",
      "pattern": "[url:value = 'http://182.113.0.119:51311/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:15:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859936/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af36b3db-bcde-5a7a-82e5-de8f9d45cc35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.236.107.68:35970/i",
      "pattern": "[url:value = 'http://113.236.107.68:35970/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:13:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859935/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bddcd39-fbc4-5235-9278-e6d9fd1f5a29",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.25.98:55387/bin.sh",
      "pattern": "[url:value = 'http://123.12.25.98:55387/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:12:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859934/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54e5ec55-f4fb-58da-9e37-b00e9d218ac0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mhjzma3p.betebetwin.com/?ublib=36ec9410-9437-4903-b055-e17becfc6a88",
      "pattern": "[url:value = 'https://mhjzma3p.betebetwin.com/?ublib=36ec9410-9437-4903-b055-e17becfc6a88']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:05:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859933/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30e18654-7cc0-559f-b71e-6ce338b22596",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://knstbms.nardtakhte.app/a119d529-4f16-4b98-9861-ac5bf9e47a2c",
      "pattern": "[url:value = 'https://knstbms.nardtakhte.app/a119d529-4f16-4b98-9861-ac5bf9e47a2c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-07T00:00:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859932/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b71213b9-76a6-5838-bd4d-b3992a039ca0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.100.235:45876/i",
      "pattern": "[url:value = 'http://42.235.100.235:45876/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:54:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859931/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3315cb71-9b56-5592-a38c-91d4e261db30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.1.80:39032/i",
      "pattern": "[url:value = 'http://110.36.1.80:39032/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:53:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859930/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df65c2dd-195e-53ba-b0b4-4a850a80e342",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.54.151.28:51476/i",
      "pattern": "[url:value = 'http://42.54.151.28:51476/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:48:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859929/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f27bfcf-5740-5bf6-86f3-68d605ae50ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.111.62:50410/i",
      "pattern": "[url:value = 'http://182.126.111.62:50410/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:47:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859928/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef98616a-f587-5a1c-b1c7-ab3c95783fa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.236.107.68:35970/bin.sh",
      "pattern": "[url:value = 'http://113.236.107.68:35970/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:40:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859927/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d148b141-33d1-5ffa-bd7e-8ef45900cc08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.66.188:36786/i",
      "pattern": "[url:value = 'http://110.37.66.188:36786/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:30:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859926/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1082cc0-5e03-53e4-9aaa-4b73bf284c51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://4h79jvxe.metrobahiscark.com/?ublib=2624b39c-ec54-4aa4-85e3-71935549e195",
      "pattern": "[url:value = 'https://4h79jvxe.metrobahiscark.com/?ublib=2624b39c-ec54-4aa4-85e3-71935549e195']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:28:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859925/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24df6757-9423-5b9d-ac11-db474af7f86f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.112.56:58414/i",
      "pattern": "[url:value = 'http://112.248.112.56:58414/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:27:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859924/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ad347df-6378-59a5-bd08-50792a96f564",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.1.80:39032/bin.sh",
      "pattern": "[url:value = 'http://110.36.1.80:39032/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:27:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859923/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46fcaac9-9f3f-519f-983c-5e47a04971ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lvgnygm.nannafreving.com/1a30e304-eb79-4b88-b41c-c6761423f25c",
      "pattern": "[url:value = 'https://lvgnygm.nannafreving.com/1a30e304-eb79-4b88-b41c-c6761423f25c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:26:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859922/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfd7d0d4-32e6-5ee3-a4af-93332a58aeaf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.111.62:50410/bin.sh",
      "pattern": "[url:value = 'http://182.126.111.62:50410/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:21:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859921/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be233cae-40e1-5ce1-8c98-3cceed9a9388",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.148.158.106:49524/bin.sh",
      "pattern": "[url:value = 'http://175.148.158.106:49524/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:20:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859920/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d1475dc-6c27-5f8e-a1b3-fa371dd78508",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.54.151.28:51476/bin.sh",
      "pattern": "[url:value = 'http://42.54.151.28:51476/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:20:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859919/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4dddd06-b32b-54a4-a27a-d34306b7479e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.237.185:53552/i",
      "pattern": "[url:value = 'http://110.39.237.185:53552/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:08:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859918/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe9157ef-49d3-53a4-a474-93bcdb10961a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.237.185:53552/bin.sh",
      "pattern": "[url:value = 'http://110.39.237.185:53552/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:06:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859917/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15275c82-79e0-534f-88fc-08899455734a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.19.254:43790/bin.sh",
      "pattern": "[url:value = 'http://119.179.19.254:43790/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859916/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4315c015-7826-5a58-8408-1a526a3a4175",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.66.188:36786/bin.sh",
      "pattern": "[url:value = 'http://110.37.66.188:36786/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:05:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859915/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0475f5b9-803f-5ff0-9e1c-fd3b0224c9a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ylccwf.jamjahani.games/261d7175-1601-45ab-aef3-8278ff3f326f",
      "pattern": "[url:value = 'https://ylccwf.jamjahani.games/261d7175-1601-45ab-aef3-8278ff3f326f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T23:01:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859914/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fb90860-d423-5924-a4cf-e6974fd9c63f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.247.209:59670/i",
      "pattern": "[url:value = 'http://110.39.247.209:59670/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859912/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4efcf966-bf41-5ac2-8c1d-128a5611d5bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.252.125:51541/i",
      "pattern": "[url:value = 'http://119.179.252.125:51541/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859913/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cdd6e06-2d75-5c7e-af0c-5f68eebbae40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.119.151:60178/i",
      "pattern": "[url:value = 'http://110.36.119.151:60178/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:50:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859911/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae2a18da-4810-5f19-a4eb-1cf28b985561",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://enkkxbi.n1betiran.com/c91f81a6-d9c5-4fc7-a9cd-ff77a0634dec",
      "pattern": "[url:value = 'https://enkkxbi.n1betiran.com/c91f81a6-d9c5-4fc7-a9cd-ff77a0634dec']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:48:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859910/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e384f8f-4233-5d5d-b0cf-31b34571051f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.93.217:47482/bin.sh",
      "pattern": "[url:value = 'http://110.36.93.217:47482/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:42:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859909/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1956a287-eb46-5613-9fdc-e148af517e05",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.252.125:51541/bin.sh",
      "pattern": "[url:value = 'http://119.179.252.125:51541/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:35:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859908/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1ad8e6f-cefc-5dba-aba1-dd5164912067",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.239.189.216:51329/bin.sh",
      "pattern": "[url:value = 'http://42.239.189.216:51329/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:35:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859907/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e97b9bee-5b56-5011-832e-b03233fd6ddd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.163.150.85:41118/i",
      "pattern": "[url:value = 'http://61.163.150.85:41118/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:34:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859906/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c31b73e-ddf1-5a3b-8154-33885ece660c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://179.49.213.85:37649/i",
      "pattern": "[url:value = 'http://179.49.213.85:37649/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859905/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba3b7aca-a494-5b12-9030-aff6c2a6d86c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.233.216:51884/i",
      "pattern": "[url:value = 'http://42.232.233.216:51884/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:16:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859904/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14e65e0a-e5ae-5521-89a8-20733d729118",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ybyvozc.jamjahani.vip/1f808480-24cd-4263-87c1-d074285a8b9c",
      "pattern": "[url:value = 'https://ybyvozc.jamjahani.vip/1f808480-24cd-4263-87c1-d074285a8b9c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859903/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b94a3a3a-8b0b-5259-8dd5-86aa3f57e12b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.211.139:40092/i",
      "pattern": "[url:value = 'http://110.38.211.139:40092/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T22:00:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859902/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f77604c9-9af8-5d4d-ad57-93bc2f1070f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dbnnsjv.mangobetfarsi.com/ab302412-ae27-45e4-b436-98014d48ce68",
      "pattern": "[url:value = 'https://dbnnsjv.mangobetfarsi.com/ab302412-ae27-45e4-b436-98014d48ce68']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T21:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859901/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73a46f8a-0f49-532f-b6fc-3d208a90cf0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.250.171:57707/i",
      "pattern": "[url:value = 'http://182.119.250.171:57707/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T21:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859900/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e32d00e-ba46-5410-829f-f06544e3b1d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.250.171:57707/bin.sh",
      "pattern": "[url:value = 'http://182.119.250.171:57707/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T21:25:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859899/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31c3be24-8dd2-5bf3-a3a7-9cf0062de1ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://npawoli.jamjahani.world/b477ab7d-084d-4ec5-9e37-3c2776fcbd6d",
      "pattern": "[url:value = 'https://npawoli.jamjahani.world/b477ab7d-084d-4ec5-9e37-3c2776fcbd6d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T21:18:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859898/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eff558c-e104-5915-b9c3-fa210cf8ce31",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.27.209:50507/bin.sh",
      "pattern": "[url:value = 'http://110.36.27.209:50507/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T21:05:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859897/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32bc2c06-8f31-5ad2-ae24-dc801209e0ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hetljl.jamjahani.football/04ae5ae6-5230-45ce-aa7a-33fc9e1f6444",
      "pattern": "[url:value = 'https://hetljl.jamjahani.football/04ae5ae6-5230-45ce-aa7a-33fc9e1f6444']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T21:04:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859896/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97d3068a-54c3-5eb8-9048-ad615a78d4ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.200.114:37484/i",
      "pattern": "[url:value = 'http://219.155.200.114:37484/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T21:01:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859895/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1dda4f2-9bd2-5aa5-b360-21dc7994c2d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.103.57:39853/i",
      "pattern": "[url:value = 'http://182.112.103.57:39853/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:58:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859894/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ccbb44b-5ece-54df-a6f7-b8689437b31e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://179.49.213.85:37649/bin.sh",
      "pattern": "[url:value = 'http://179.49.213.85:37649/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:56:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859893/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b046f8a-506c-5df1-ae75-eaf7f4139be7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.201.196:50911/i",
      "pattern": "[url:value = 'http://110.38.201.196:50911/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:51:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859892/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--451e44c8-125b-5472-b5d8-ff8fadae6346",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.7.155.123:39097/i",
      "pattern": "[url:value = 'http://123.7.155.123:39097/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:47:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859891/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f25ba8d-3648-5bb3-9510-32b64f24e32b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.103.222:60360/i",
      "pattern": "[url:value = 'http://112.248.103.222:60360/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:47:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859890/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed302534-8ce1-586c-970d-b4861a3bc88f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.200.114:37484/bin.sh",
      "pattern": "[url:value = 'http://219.155.200.114:37484/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:45:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859889/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a65ea9e-db25-5c47-9edb-72c8abb940f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rvlpcvr.jogodobicho.games/36c53e51-0ab6-46ff-bce4-b20db3a6dab6",
      "pattern": "[url:value = 'https://rvlpcvr.jogodobicho.games/36c53e51-0ab6-46ff-bce4-b20db3a6dab6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859888/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1b25c2e-7677-53dc-a12a-24e1b23e1aae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.126.117:48263/i",
      "pattern": "[url:value = 'http://115.49.126.117:48263/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859887/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a8d2d9c-0d4d-5628-b65a-f2fe5b0795f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/8611510537/5SwXPdA.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/8611510537/5SwXPdA.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:38:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859885/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58ab335d-2cec-5390-bd3c-d6dec536f39f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/5279938618/uGnRvhC.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/5279938618/uGnRvhC.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:38:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859886/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57c647e9-8b91-53f1-b247-8d97e8bfacbc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.103.57:39853/bin.sh",
      "pattern": "[url:value = 'http://182.112.103.57:39853/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:36:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859884/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--838f8c4b-7f01-5721-a2dc-9bd524c3e8cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.95.249:36350/i",
      "pattern": "[url:value = 'http://163.142.95.249:36350/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:28:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859883/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e12dd4d2-b571-56a4-ba37-80dfda563540",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.103.222:60360/bin.sh",
      "pattern": "[url:value = 'http://112.248.103.222:60360/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:27:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859882/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60be8236-f894-5cba-957f-595cab128965",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.136.102.112:40309/i",
      "pattern": "[url:value = 'http://110.136.102.112:40309/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:24:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859881/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e55c246-4b23-53cb-9340-9ac9b97b2824",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.218.59.71:7461/i",
      "pattern": "[url:value = 'http://115.218.59.71:7461/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:10:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859880/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d61dae05-26a7-552d-936a-8b9319c4011b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://viopkdh.kbshavanese.com/73d87ffb-2c1b-4ae6-ad04-e4aafec2b1ce",
      "pattern": "[url:value = 'https://viopkdh.kbshavanese.com/73d87ffb-2c1b-4ae6-ad04-e4aafec2b1ce']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T20:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859879/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2625b142-ae02-570f-9c7c-f738fa3f8562",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.136.102.112:40309/bin.sh",
      "pattern": "[url:value = 'http://110.136.102.112:40309/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:45:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859878/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6c56202-e6d7-582c-ac3c-48f87597867d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.218.59.71:7461/bin.sh",
      "pattern": "[url:value = 'http://115.218.59.71:7461/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:42:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859877/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38a606ab-5a19-50a5-b3ab-50c09afc126f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.30.14:46894/i",
      "pattern": "[url:value = 'http://123.12.30.14:46894/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859876/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b697427-cd0b-5c31-8d17-bb201ebdbc07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xhqkuit.kvbel.com/db364957-eb58-4179-b72b-094d585a0bc7",
      "pattern": "[url:value = 'https://xhqkuit.kvbel.com/db364957-eb58-4179-b72b-094d585a0bc7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:28:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859875/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a192f0e-0cc1-5330-bbc9-ffc2ebb557d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.30.14:46894/bin.sh",
      "pattern": "[url:value = 'http://123.12.30.14:46894/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859874/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e7db86f-c9ed-51a9-b6b4-648995897713",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://7tzr8pjb.mattheneus-healthcare.com/?ublib=7070e65a-2f2b-442a-87f0-2735fc6a7ca6",
      "pattern": "[url:value = 'https://7tzr8pjb.mattheneus-healthcare.com/?ublib=7070e65a-2f2b-442a-87f0-2735fc6a7ca6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:27:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859873/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--807280f1-e2c1-50c5-aa2c-45c8dc789f24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.242.213:59846/i",
      "pattern": "[url:value = 'http://219.157.242.213:59846/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:20:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859872/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8de64d2-876e-5d39-be87-4ef8f1b9c2e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.44.158:53116/i",
      "pattern": "[url:value = 'http://110.37.44.158:53116/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:18:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859871/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57fce999-4b8f-5023-a70a-2c81be0d883e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.167.25.141:34665/i",
      "pattern": "[url:value = 'http://119.167.25.141:34665/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:15:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859870/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22a80f25-e352-50f0-bb99-402642a53847",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.33.254:45233/i",
      "pattern": "[url:value = 'http://125.44.33.254:45233/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:11:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859869/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f25e90e0-3435-504e-b144-a285037d1342",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.52.201.30:43700/i",
      "pattern": "[url:value = 'http://42.52.201.30:43700/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:08:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859868/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2dbf887-15e2-5273-a4ca-792906e2c4f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s3unirpm.bet90land.com/?ublib=62caff92-ce75-458f-b1c9-f56b1cf62f56",
      "pattern": "[url:value = 'https://s3unirpm.bet90land.com/?ublib=62caff92-ce75-458f-b1c9-f56b1cf62f56']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859867/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53aa9fbd-53a1-5035-bdb5-736d331b5915",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rxxgnn.jamjahani.cash/cee2e7f4-f165-4dc7-90d7-26dcfac6e73d",
      "pattern": "[url:value = 'https://rxxgnn.jamjahani.cash/cee2e7f4-f165-4dc7-90d7-26dcfac6e73d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T19:04:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859866/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7293fd6-a98c-517c-a24f-ffc36135bc29",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.44.158:53116/bin.sh",
      "pattern": "[url:value = 'http://110.37.44.158:53116/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:59:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859865/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51f852a5-86a5-5767-92ef-4e47447daca6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.136.15:37570/bin.sh",
      "pattern": "[url:value = 'http://42.227.136.15:37570/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:57:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859864/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d666ce7-713f-5b5d-b67b-38dfec8edf9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.242.213:59846/bin.sh",
      "pattern": "[url:value = 'http://219.157.242.213:59846/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859863/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16275dd2-0858-5d21-841e-16fbc179fe60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://yghqghh.lolsurpriseball.com/785b4df3-2198-46fb-93c0-b0f63650a59f",
      "pattern": "[url:value = 'https://yghqghh.lolsurpriseball.com/785b4df3-2198-46fb-93c0-b0f63650a59f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:49:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859862/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5b3d98a-4c5f-552b-96e1-f5415d07ef3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.216.243.150:39103/i",
      "pattern": "[url:value = 'http://27.216.243.150:39103/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:44:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859861/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44338a82-95d3-5dca-acc8-db52858834cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://58.255.40.242:37399/i",
      "pattern": "[url:value = 'http://58.255.40.242:37399/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:42:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859860/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b7663fc-3c87-5499-b2f2-2091dfc82e2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.120.55:50953/i",
      "pattern": "[url:value = 'http://182.126.120.55:50953/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859859/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4555003e-cdca-5e98-b974-02a409cb5a36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zqgqzuo.mangobetfarsi.com/be09e16f-39e2-47cd-a910-3682c1995a65",
      "pattern": "[url:value = 'https://zqgqzuo.mangobetfarsi.com/be09e16f-39e2-47cd-a910-3682c1995a65']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:39:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859858/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--540e646b-9309-564c-82b3-2361beca2673",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.136.15:37570/i",
      "pattern": "[url:value = 'http://42.227.136.15:37570/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:31:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859857/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10abe398-309d-57c4-85b3-af102bad9121",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://162.255.251.91:42469/i",
      "pattern": "[url:value = 'http://162.255.251.91:42469/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:26:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859856/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2aa017a-b9f6-56fd-ba97-dd9c5f0a31a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.220.33:55871/i",
      "pattern": "[url:value = 'http://42.228.220.33:55871/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T18:22:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859855/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f45bed0b-220f-55e1-a4ed-f85aba686d28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://eycgzaa.jamjahani.site/379bd89f-0379-4c99-ac20-f52e355f2c37",
      "pattern": "[url:value = 'https://eycgzaa.jamjahani.site/379bd89f-0379-4c99-ac20-f52e355f2c37']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:56:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859854/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4525e89-2333-5226-ae79-3a5fa6ec33fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.200.225:47048/i",
      "pattern": "[url:value = 'http://42.230.200.225:47048/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:53:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859853/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dcea693-ddf3-5c9a-a66c-c1027d0b9f2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.29.214.246:45833/Mozi.m",
      "pattern": "[url:value = 'http://124.29.214.246:45833/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:46:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859851/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f979e067-4894-5789-a70d-55172d133e3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.120.161.209:56639/Mozi.m",
      "pattern": "[url:value = 'http://45.120.161.209:56639/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:46:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859852/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25695bf4-e9a2-5f6d-9c51-914d8f7305d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.244.198:56759/Mozi.m",
      "pattern": "[url:value = 'http://110.39.244.198:56759/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:46:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859850/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a98ef801-f216-5960-b499-40e24193f664",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.220.33:55871/bin.sh",
      "pattern": "[url:value = 'http://42.228.220.33:55871/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:43:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859849/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65cadde3-1ae1-5bea-8de4-0a8b3d3cbede",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.230.200.225:47048/bin.sh",
      "pattern": "[url:value = 'http://42.230.200.225:47048/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:42:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859848/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c927958e-66d9-5c87-85d2-9e9e95c0644d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.65.9:56575/i",
      "pattern": "[url:value = 'http://110.36.65.9:56575/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:37:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859846/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51346b4b-0f84-554e-979a-f87b885cae8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.156.31:46457/i",
      "pattern": "[url:value = 'http://42.234.156.31:46457/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:37:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859847/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98e1df44-1ef2-5190-b1b0-a44cc4b38265",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://is34r2fh.marc90bet.com/?ublib=278be8f4-87b7-4438-be67-2f447ea57a51",
      "pattern": "[url:value = 'https://is34r2fh.marc90bet.com/?ublib=278be8f4-87b7-4438-be67-2f447ea57a51']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:29:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859845/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd2b8d36-8b95-5a63-87d2-63a9ad4fd37b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/adb.sh",
      "pattern": "[url:value = 'http://176.65.149.168/adb.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:26:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859844/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1e8b80d-9623-5a61-8b1b-0cf47241d9e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.132.109/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://176.65.132.109/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859843/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a509821-0526-569e-b34a-d735182e368b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.144/bins/nova.i686",
      "pattern": "[url:value = 'http://176.65.148.144/bins/nova.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:25:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859842/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02b11099-27d5-508c-8aaa-d00cee9b970a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.144/nova.sh",
      "pattern": "[url:value = 'http://176.65.148.144/nova.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:25:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859841/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ac83b60-deea-5536-be5c-ef1e82404c5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/7782139129/TYolMs8.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/7782139129/TYolMs8.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:25:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859840/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--436f87f4-c1a8-5e1b-801e-fd450a6854f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.104.71:53789/i",
      "pattern": "[url:value = 'http://39.74.104.71:53789/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859839/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--787ad505-27db-5a69-b6a1-9f5521e459cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.104.71:53789/bin.sh",
      "pattern": "[url:value = 'http://39.74.104.71:53789/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859838/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a8d5105-0103-52ec-80cb-2d564bd00792",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://fgeszrs.dahdahtoys.com/452841ac-082a-409f-8b22-a924f8c94cde",
      "pattern": "[url:value = 'https://fgeszrs.dahdahtoys.com/452841ac-082a-409f-8b22-a924f8c94cde']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:18:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859837/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d446bb2e-7b50-5e63-b413-205e48daca1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.241.60:34857/i",
      "pattern": "[url:value = 'http://110.39.241.60:34857/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:16:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859836/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb89af60-59d9-582d-955a-af559bae3a47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.160.98:52782/i",
      "pattern": "[url:value = 'http://115.48.160.98:52782/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859835/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9239c94-9266-5561-af6b-948b1affe9d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f9460d",
      "pattern": "[url:value = 'http://45.205.1.59/f9460d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859822/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23eaabb3-b2cf-574d-8f31-f746bf3e9e7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/8f4c61",
      "pattern": "[url:value = 'http://45.205.1.59/8f4c61']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859823/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75d1a47e-0c59-54d3-9bec-830e4e4ee146",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/7dc165",
      "pattern": "[url:value = 'http://45.205.1.59/7dc165']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859824/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--774a1a28-2c1f-525a-9fd1-6a9de937a6d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/badf9b",
      "pattern": "[url:value = 'http://45.205.1.59/badf9b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859825/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a2198e4-a5c3-555a-9ca2-fbd03601e363",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/4de1fb",
      "pattern": "[url:value = 'http://45.205.1.59/4de1fb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859826/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6a92d5a-a2f1-533c-83be-4fa38d56b9d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/cff527",
      "pattern": "[url:value = 'http://45.205.1.59/cff527']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859827/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4863ff5b-cf8a-5e10-89da-66290f70ef2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/f79a43",
      "pattern": "[url:value = 'http://45.205.1.59/f79a43']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859828/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcfd69ba-cb48-5b63-b842-2db2baabedfb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/35cdda",
      "pattern": "[url:value = 'http://45.205.1.59/35cdda']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859829/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76ac34bc-385d-527a-90ec-95ba44c901e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/18a84f",
      "pattern": "[url:value = 'http://45.205.1.59/18a84f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859830/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c55a559-bd6b-5c9e-9e3e-a5c246d20a01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/2fc2f3",
      "pattern": "[url:value = 'http://45.205.1.59/2fc2f3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859831/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe91c326-1a2f-5c46-9e2c-cc87fc431c15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1bedf9",
      "pattern": "[url:value = 'http://45.205.1.59/1bedf9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859832/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--805f7188-5050-588e-a49c-d44ffe7a8e3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/1fbb47",
      "pattern": "[url:value = 'http://45.205.1.59/1fbb47']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859833/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd4bdb0c-5c5d-5cad-8135-aab335e80758",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.205.1.59/ok",
      "pattern": "[url:value = 'http://45.205.1.59/ok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859834/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--205919eb-d543-5ede-a41b-a4e1ace2f2f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://171.38.40.122:47753/i",
      "pattern": "[url:value = 'http://171.38.40.122:47753/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:05:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859821/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19603a65-8e57-56d6-bc25-efd66a51c772",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.65.9:56575/bin.sh",
      "pattern": "[url:value = 'http://110.36.65.9:56575/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T17:00:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859820/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e98dd6cf-e19e-5a2f-8aaa-3df3c8b5b67d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xvbfkf.jamjahani.app/2be3a3ae-4afa-4b5f-aaf4-a010647e6e60",
      "pattern": "[url:value = 'https://xvbfkf.jamjahani.app/2be3a3ae-4afa-4b5f-aaf4-a010647e6e60']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:59:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859819/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--096c2b33-8c19-522a-8a79-7d073b8f105f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.159/20.exe",
      "pattern": "[url:value = 'http://62.60.226.159/20.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:58:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859817/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26442b62-6f53-5e65-86d3-206a64277964",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.185/s287.exe",
      "pattern": "[url:value = 'http://62.60.226.185/s287.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:58:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859818/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dc294b5-5f38-5f09-b1e8-22338cf5c5fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.159/16.exe",
      "pattern": "[url:value = 'http://62.60.226.159/16.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:58:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859816/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdbfbabe-76f7-5f12-94fd-aaba71bc6a02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.241.60:34857/bin.sh",
      "pattern": "[url:value = 'http://110.39.241.60:34857/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:51:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859815/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9462540-4111-5366-ab78-4730efb472fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.33.30:40273/i",
      "pattern": "[url:value = 'http://182.113.33.30:40273/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:50:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859814/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--378c13ae-a67e-524b-a0a9-b1efbcf7c6c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://171.38.40.122:47753/bin.sh",
      "pattern": "[url:value = 'http://171.38.40.122:47753/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:40:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859813/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4860b4bc-4f3f-5cd1-83e5-afd0aa833d14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://108.168.10.70:48442/bin.sh",
      "pattern": "[url:value = 'http://108.168.10.70:48442/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:40:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859812/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2874e2f-2948-506d-ba9a-f97057cd5824",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tvonayz.jamjahani.vip/fb9549a1-6721-459d-8b1c-bd9815fbc566",
      "pattern": "[url:value = 'https://tvonayz.jamjahani.vip/fb9549a1-6721-459d-8b1c-bd9815fbc566']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859811/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8183e130-3e99-539b-b777-4a0a212413af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://108.168.10.70:48442/i",
      "pattern": "[url:value = 'http://108.168.10.70:48442/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:36:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859810/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--629a74ab-435d-5de4-bee4-3edc161c209a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.61/wife.ppc440",
      "pattern": "[url:value = 'http://176.65.139.61/wife.ppc440']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859809/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--072ac4a6-9314-5a8b-bedf-9e5f036b814d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://192.159.99.49/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://192.159.99.49/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:29:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859808/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ff0cbf5-df28-5f3d-9ea1-b88f336f4852",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://192.159.99.49/bin/support.client.exe",
      "pattern": "[url:value = 'https://192.159.99.49/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859807/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67c635fd-b645-50da-ad74-d34f69fb0b30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.33.30:40273/bin.sh",
      "pattern": "[url:value = 'http://182.113.33.30:40273/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:28:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859806/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23aae977-a258-5be9-99ba-207729a3e1da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.242.66:39084/i",
      "pattern": "[url:value = 'http://110.39.242.66:39084/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:17:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859805/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f64645a-dda4-50e9-a745-20336017841a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.182.186:44028/bin.sh",
      "pattern": "[url:value = 'http://123.14.182.186:44028/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:14:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859804/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0955db3-4cc9-52bf-96ef-e3211c6fffc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.126.117:48263/bin.sh",
      "pattern": "[url:value = 'http://115.49.126.117:48263/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:11:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859803/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db5085a6-92f9-55d0-a423-9332356f76f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://arihanp.jamjahani.website/02fc6260-c8a4-47ad-8767-59961747f203",
      "pattern": "[url:value = 'https://arihanp.jamjahani.website/02fc6260-c8a4-47ad-8767-59961747f203']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T16:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859802/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9df4136-ab2e-5726-993c-5246d4296af1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.250.188:59122/i",
      "pattern": "[url:value = 'http://115.57.250.188:59122/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:56:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859801/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a718bea-7ff9-5c1f-928c-b3d9575fc669",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.48.220:35918/i",
      "pattern": "[url:value = 'http://125.45.48.220:35918/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:47:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859800/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe1cefa8-980e-5f73-a3dc-cf61410928fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/mips",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:46:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859799/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bff2e66-0f5f-524c-a9fa-3c5c7ecc6474",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/x86",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:46:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859798/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e44f9a1-1e08-54dc-9feb-fe0d713c159b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/mpsl",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:46:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859796/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d2cbe56-e7cc-5be2-b4c0-f982dd9adebe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/arm7",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:46:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859797/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cdeb771-217a-584d-912a-4cbf0d73e460",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/arm5",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:45:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859795/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f23f2dae-dc3d-58da-aebb-ada7c59e904a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/massload",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/massload']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:45:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859794/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29747cd6-8568-5f08-8300-411752f10842",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://vitacocoyougoloco.potassium.st/ppc",
      "pattern": "[url:value = 'http://vitacocoyougoloco.potassium.st/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:45:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859793/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--042435e0-45dc-529e-ad45-7566c2473021",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.31.182:39631/i",
      "pattern": "[url:value = 'http://110.37.31.182:39631/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:43:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859792/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1266a6ba-e99a-5681-be7f-5acf1793fe51",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.250.188:59122/bin.sh",
      "pattern": "[url:value = 'http://115.57.250.188:59122/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:39:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859791/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--defb1bc7-0aad-5c44-9a60-1869c2cdcf53",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.41.81:45113/i",
      "pattern": "[url:value = 'http://182.113.41.81:45113/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:36:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859790/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ab801fc-562a-548d-90a6-04620bda71c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://212.178.3.64:8771/i",
      "pattern": "[url:value = 'http://212.178.3.64:8771/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:33:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859789/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9907d78-c758-50f9-9129-f51ddd464bbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://923nr8dp.chloroquineser.com/?ublib=2c535a6c-5bdf-4422-9498-47886a84aec1",
      "pattern": "[url:value = 'https://923nr8dp.chloroquineser.com/?ublib=2c535a6c-5bdf-4422-9498-47886a84aec1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859788/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4dff952-9931-50a6-a4f7-d289c20eb236",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://urdjsnn.jamjahani.net/5c486b01-ad6a-4374-8739-5f19b677b491",
      "pattern": "[url:value = 'https://urdjsnn.jamjahani.net/5c486b01-ad6a-4374-8739-5f19b677b491']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:22:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859787/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dce46413-bb51-5837-9144-3ec3ec852d50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.48.220:35918/bin.sh",
      "pattern": "[url:value = 'http://125.45.48.220:35918/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:20:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859786/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75592d87-7e2d-5eb1-b1a0-8e69b3966f89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.31.182:39631/bin.sh",
      "pattern": "[url:value = 'http://110.37.31.182:39631/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:19:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859785/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5472a7cd-4a0d-593c-b660-c0f7151b8954",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/kozak.sh",
      "pattern": "[url:value = 'http://45.202.246.143/bins/kozak.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859772/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4355de81-56ca-5d9f-8469-ebc6ebd5ab3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/psh4",
      "pattern": "[url:value = 'http://45.202.246.143/bins/psh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859773/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aa21a88-1341-5e52-a1dd-7e591f7a9b2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/o.xml",
      "pattern": "[url:value = 'http://45.202.246.143/bins/o.xml']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859774/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff18b46c-f2bb-56bc-8f3c-72aaafbf1953",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/parm5",
      "pattern": "[url:value = 'http://45.202.246.143/bins/parm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859775/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--982933bc-a2e6-56ba-80b9-67dde9399e3f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/parm6",
      "pattern": "[url:value = 'http://45.202.246.143/bins/parm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859776/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7851891-0b5d-5eb8-9989-00c74f8796ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/parm",
      "pattern": "[url:value = 'http://45.202.246.143/bins/parm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859777/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--572f7dc7-70b7-5287-98d7-33e6a538e3e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/pppc",
      "pattern": "[url:value = 'http://45.202.246.143/bins/pppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859778/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75048fcb-9780-5fe9-86f1-659c8cbd1ccc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/px86",
      "pattern": "[url:value = 'http://45.202.246.143/bins/px86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859779/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--671c57ac-f3f4-5346-98c9-0f1747beb294",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/pmpsl",
      "pattern": "[url:value = 'http://45.202.246.143/bins/pmpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859780/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f38e74f5-f0ac-55e9-8e94-cc879d202dbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/pm68k",
      "pattern": "[url:value = 'http://45.202.246.143/bins/pm68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859781/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6325dbdb-f1b7-5743-befb-08737f7d3429",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/pspc",
      "pattern": "[url:value = 'http://45.202.246.143/bins/pspc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859782/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60d1e037-09da-5575-8096-7519d3633740",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/pmips",
      "pattern": "[url:value = 'http://45.202.246.143/bins/pmips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859783/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2288180f-4a34-5764-aabb-f9d565c1641e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.246.143/bins/parm7",
      "pattern": "[url:value = 'http://45.202.246.143/bins/parm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859784/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57f22046-a437-5739-9591-2941aa0b7fd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.185/v49922.exe",
      "pattern": "[url:value = 'http://62.60.226.185/v49922.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859771/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06739ced-8b94-56ae-8b39-0cc3b15fa451",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.41.81:45113/bin.sh",
      "pattern": "[url:value = 'http://182.113.41.81:45113/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:12:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859770/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c10fa6e-a098-5dfc-9526-b8d2a21fbba2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.10.44:38383/i",
      "pattern": "[url:value = 'http://182.112.10.44:38383/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:08:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859769/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--604e8c9e-4573-567c-8329-4871aa3d2c10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://212.178.3.64:8771/bin.sh",
      "pattern": "[url:value = 'http://212.178.3.64:8771/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T15:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859768/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f50e4331-312f-5e79-b3d3-0224712ad4f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rmbvag.jamjahani2026shartbandi.com/a896ac04-ebfe-462f-94ab-d0324e8bb73a",
      "pattern": "[url:value = 'https://rmbvag.jamjahani2026shartbandi.com/a896ac04-ebfe-462f-94ab-d0324e8bb73a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:59:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859767/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ee82d08-7cec-5acc-a14b-efc597045815",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.224:60780/i",
      "pattern": "[url:value = 'http://163.142.92.224:60780/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:55:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859766/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--300c30d1-0d5a-5093-8d36-f41b15f8ea6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.10.44:38383/bin.sh",
      "pattern": "[url:value = 'http://182.112.10.44:38383/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:55:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859765/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2642567-b42e-5230-98e1-70c22221fca6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://caxvhiw.jamjahani.org/37f1b5b2-5665-4b06-ad5f-58a735bfd3d0",
      "pattern": "[url:value = 'https://caxvhiw.jamjahani.org/37f1b5b2-5665-4b06-ad5f-58a735bfd3d0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:43:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859764/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ddbaabb-73bd-5b73-87a6-c0df9e49787d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://210.97.100.192:44564/i",
      "pattern": "[url:value = 'http://210.97.100.192:44564/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:40:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859763/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11bc27d2-6e5a-56ce-b3bf-1a3ba79a4157",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://210.97.100.192:44564/bin.sh",
      "pattern": "[url:value = 'http://210.97.100.192:44564/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:37:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859762/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcbb94e9-0367-5d2b-8a8f-709b50213348",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.156.31:46457/bin.sh",
      "pattern": "[url:value = 'http://42.234.156.31:46457/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:30:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859761/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b703659a-2ea9-5e66-9f3d-cd5c264e2896",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dkrbvhs.jamjahani.site/89feb712-a453-42cc-b6f8-a803be54d631",
      "pattern": "[url:value = 'https://dkrbvhs.jamjahani.site/89feb712-a453-42cc-b6f8-a803be54d631']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859760/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e2439e-69d5-5202-b937-a8bf6cd77a25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://po9isauo.bet90boro.com/?ublib=6ad529b4-2258-40df-b312-1df6db19911e",
      "pattern": "[url:value = 'https://po9isauo.bet90boro.com/?ublib=6ad529b4-2258-40df-b312-1df6db19911e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T14:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859759/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a2b953f-3b02-5942-9bdd-a27b7025b5f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://uwxrhkk.mangobetfarsi.com/68e30188-7d96-40bf-af39-b7214ba7ff35",
      "pattern": "[url:value = 'https://uwxrhkk.mangobetfarsi.com/68e30188-7d96-40bf-af39-b7214ba7ff35']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T13:59:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859758/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--026d7039-6ee8-5c22-a845-00ddfbb95541",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.3.49:44283/i",
      "pattern": "[url:value = 'http://123.188.3.49:44283/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T13:56:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859757/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5742d7d-39f7-5773-bffc-d2f8ad08b347",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.3.49:44283/bin.sh",
      "pattern": "[url:value = 'http://123.188.3.49:44283/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T13:54:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859756/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ef6e833-5fc0-5420-b6ec-5429997365b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://v47m17r8.cerocarey.com/?ublib=4907547e-8a7d-41a9-a116-a5c43c8df800",
      "pattern": "[url:value = 'https://v47m17r8.cerocarey.com/?ublib=4907547e-8a7d-41a9-a116-a5c43c8df800']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T13:26:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859755/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ab8a353-072d-58fd-b58d-0f818cdba19e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nzfcrki.lolsurpriseball.com/ab24aa56-3f0f-45a5-8115-1032edc05f6a",
      "pattern": "[url:value = 'https://nzfcrki.lolsurpriseball.com/ab24aa56-3f0f-45a5-8115-1032edc05f6a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T13:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859754/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a81e80de-c9b9-5acb-8e30-8ab69156986f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.86.62.239:53476/i",
      "pattern": "[url:value = 'http://42.86.62.239:53476/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T13:08:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859753/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--514558b8-798b-5544-9fa4-7e4df7d11845",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dlklyo.jamjahani2026.football/33101bcd-fd90-48ef-a8bd-f1b5429658e1",
      "pattern": "[url:value = 'https://dlklyo.jamjahani2026.football/33101bcd-fd90-48ef-a8bd-f1b5429658e1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:58:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859752/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bbfff55-0914-5802-9079-3ca901c204b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.86.62.239:53476/bin.sh",
      "pattern": "[url:value = 'http://42.86.62.239:53476/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:44:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859751/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ae59bb8-2f34-54b3-bfcd-5d9beb61eeb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://errcxxn.libertabet.tv/9f7eda19-fac9-451e-a68a-033499bf7a72",
      "pattern": "[url:value = 'https://errcxxn.libertabet.tv/9f7eda19-fac9-451e-a68a-033499bf7a72']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859750/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65059933-863e-5d05-af74-fe20efc81af6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.184.28.220:48148/i",
      "pattern": "[url:value = 'http://119.184.28.220:48148/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:39:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859749/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d1e09f2-3143-56e5-8677-b82275e263a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.53.223:49631/i",
      "pattern": "[url:value = 'http://115.55.53.223:49631/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859748/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--312770c2-529a-5614-b3c2-359e65c4a34b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.150.61:33796/i",
      "pattern": "[url:value = 'http://222.138.150.61:33796/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859747/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ad5037b-20a1-5ac7-b194-d30e8bfdc1f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.190.160.21:43135/i",
      "pattern": "[url:value = 'http://123.190.160.21:43135/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:30:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859746/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6bbf64e-8d93-5f9e-a57a-46221f5b9810",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.97.255.179:33615/i",
      "pattern": "[url:value = 'http://59.97.255.179:33615/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859745/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccb5140d-65b3-5818-9f41-437bd16ef913",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.212.198:49800/i",
      "pattern": "[url:value = 'http://222.137.212.198:49800/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:23:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859744/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f89af624-0ab3-5bb8-a8dc-c039962b876c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.190.160.21:43135/bin.sh",
      "pattern": "[url:value = 'http://123.190.160.21:43135/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:21:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859743/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf3074ea-0813-53db-b2a2-43317ddd789a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.212.198:49800/bin.sh",
      "pattern": "[url:value = 'http://222.137.212.198:49800/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:21:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859742/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f91892b4-ff61-5d94-b83c-362814ffc560",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.184.28.220:48148/bin.sh",
      "pattern": "[url:value = 'http://119.184.28.220:48148/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:16:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859741/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--135c16e8-0744-5fcd-a1d5-a14fabe531e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.150.61:33796/bin.sh",
      "pattern": "[url:value = 'http://222.138.150.61:33796/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:12:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859740/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e840116-f7bc-5c81-bb12-e1a777830980",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.53.223:49631/bin.sh",
      "pattern": "[url:value = 'http://115.55.53.223:49631/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859739/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab8fe605-4011-5466-8ad1-c1b031539bbc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.244.36.34:55584/i",
      "pattern": "[url:value = 'http://94.244.36.34:55584/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:04:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859738/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1d1c277-b149-5d1d-9c3c-ef71502dbbe4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mgyhtpm.libertabetgiris.com/d47f6aba-834e-4c96-ae2f-a6861381c18a",
      "pattern": "[url:value = 'https://mgyhtpm.libertabetgiris.com/d47f6aba-834e-4c96-ae2f-a6861381c18a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T12:03:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859737/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a84353d6-80d0-53b2-a32f-24655703e5c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.233.94.135:34255/i",
      "pattern": "[url:value = 'http://45.233.94.135:34255/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859735/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--327e4ed4-aadd-58c2-9c81-619c2176348a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.190.243:60612/i",
      "pattern": "[url:value = 'http://123.5.190.243:60612/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859736/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b9d1542-2d27-58ac-9e8d-098dcbb286e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.233.94.135:34255/bin.sh",
      "pattern": "[url:value = 'http://45.233.94.135:34255/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859734/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0b777d1-1259-5ca3-aa1b-06f065cdc67d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.97.255.179:33615/bin.sh",
      "pattern": "[url:value = 'http://59.97.255.179:33615/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:51:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859733/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07f19186-2c14-5951-98be-38e55de2a965",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.147.216:53251/i",
      "pattern": "[url:value = 'http://115.48.147.216:53251/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:48:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859732/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95f3363a-e63e-5517-b7c9-29c8a68ede56",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.222.44.82:46256/i",
      "pattern": "[url:value = 'http://27.222.44.82:46256/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:41:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859731/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da53f001-3aa9-51c1-bbd0-b64e94faca52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.244.36.34:55584/bin.sh",
      "pattern": "[url:value = 'http://94.244.36.34:55584/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:37:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859730/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18e7f0be-041d-52df-b3e5-310ff66900fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://77.79.160.210:35206/i",
      "pattern": "[url:value = 'http://77.79.160.210:35206/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:34:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859729/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c67cc28c-7395-59a8-8d45-c6cab1cbf32a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.190.243:60612/bin.sh",
      "pattern": "[url:value = 'http://123.5.190.243:60612/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:32:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859728/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04ea21b6-a0e2-597d-a010-f5c10725dd6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.147.216:53251/bin.sh",
      "pattern": "[url:value = 'http://115.48.147.216:53251/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:32:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859727/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d635767c-1b4d-5705-9fe6-d4c06e5e0c5b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.21.50:43174/i",
      "pattern": "[url:value = 'http://123.12.21.50:43174/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:27:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859726/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20a5e564-347c-5a5d-871a-f529c006ad30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://34bbeito.canlibahis1xbet.click/?ublib=8036ce7c-3d90-4ad5-821c-d9e59cf3512b",
      "pattern": "[url:value = 'https://34bbeito.canlibahis1xbet.click/?ublib=8036ce7c-3d90-4ad5-821c-d9e59cf3512b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:26:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859725/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2562f7f-6b9a-517a-ae29-396e5828be2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wcrvlfe.kvbel.com/bd49d22d-aa5a-440b-9181-3f81161f941f",
      "pattern": "[url:value = 'https://wcrvlfe.kvbel.com/bd49d22d-aa5a-440b-9181-3f81161f941f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:26:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859724/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c99bad5e-9302-525e-a494-56a9640b6c2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wvquvzx.kenzobet90.com/f6fe481f-ce20-4f12-bf20-3988ccbb5d5d",
      "pattern": "[url:value = 'https://wvquvzx.kenzobet90.com/f6fe481f-ce20-4f12-bf20-3988ccbb5d5d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859723/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--041e53e0-50bc-5599-bebb-684083a87661",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.167.238:33072/i",
      "pattern": "[url:value = 'http://42.235.167.238:33072/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:23:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859722/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fa2d1a9-c463-51a6-a1be-0c01df398c94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.222.44.82:46256/bin.sh",
      "pattern": "[url:value = 'http://27.222.44.82:46256/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T11:16:33Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859721/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--838e1a7d-59ad-5289-bc32-56a9aec3847d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.21.50:43174/bin.sh",
      "pattern": "[url:value = 'http://123.12.21.50:43174/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:58:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859720/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc45668a-cc01-53b8-a861-ac54c87546ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lfwboc.jamejahani.win/24648e82-9988-406f-8296-ce55b457ade9",
      "pattern": "[url:value = 'https://lfwboc.jamejahani.win/24648e82-9988-406f-8296-ce55b457ade9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:58:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859719/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b295c5fb-a628-566d-849e-93fa8f0e24b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.58.180:60093/i",
      "pattern": "[url:value = 'http://27.202.58.180:60093/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:56:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859718/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f633af1-4ecb-562d-a031-957fefe9c953",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.185.240.246:49841/i",
      "pattern": "[url:value = 'http://119.185.240.246:49841/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:55:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859717/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aebcf69c-5114-57b2-aded-012269445311",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.167.238:33072/bin.sh",
      "pattern": "[url:value = 'http://42.235.167.238:33072/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:55:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859715/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38ea9ae2-0bbc-5d76-a98f-cec4ae6ac994",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.185.240.246:49841/bin.sh",
      "pattern": "[url:value = 'http://119.185.240.246:49841/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:55:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859716/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9021627c-7143-58a8-ae69-07d1aa058c33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.239.189.216:51329/i",
      "pattern": "[url:value = 'http://42.239.189.216:51329/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:55:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859714/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4339b874-ebb4-527b-9676-bd15913e8b69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/sh4",
      "pattern": "[url:value = 'http://disrupt.anondns.net/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:55:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859713/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e63f0efd-d121-51ab-ac45-d6bed893aef4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/arm5",
      "pattern": "[url:value = 'http://disrupt.anondns.net/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:55:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859712/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f9d9f13-41f3-5038-8c38-284cb8670113",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bdyqsrv.kbshavanese.com/3269fb46-d1f7-448e-a6b3-c961f0afe2d9",
      "pattern": "[url:value = 'https://bdyqsrv.kbshavanese.com/3269fb46-d1f7-448e-a6b3-c961f0afe2d9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859711/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d56ac5fd-10af-58fa-bc43-7828c50374d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/ppc",
      "pattern": "[url:value = 'http://no7shmh.shop/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859706/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0132480-13f1-5c4c-8e6b-bc412b125795",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/x86",
      "pattern": "[url:value = 'http://no7shmh.shop/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859707/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8fae84c-4481-52f8-bb05-7cdf0dcc8a52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/spc",
      "pattern": "[url:value = 'http://no7shmh.shop/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859708/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bb22948-087e-538e-9565-4f880a03f20b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/arm6",
      "pattern": "[url:value = 'http://disrupt.anondns.net/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859709/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daafd156-746d-5a3c-9a50-1c7b204c54ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/ppc",
      "pattern": "[url:value = 'http://disrupt.anondns.net/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859710/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3daf434a-b3fb-525c-851e-82ddc7cee0fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/mips",
      "pattern": "[url:value = 'http://no7shmh.shop/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859701/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f13a618-e59f-5566-b40a-8c9ed3bec899",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/arm5",
      "pattern": "[url:value = 'http://no7shmh.shop/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859702/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ece7a14-a76b-5960-b011-d86024cfdeba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/x86_64",
      "pattern": "[url:value = 'http://disrupt.anondns.net/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859703/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a04e643a-0f9b-5e01-85ce-6990f5581cc4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/m68k",
      "pattern": "[url:value = 'http://disrupt.anondns.net/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859704/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b620088a-e896-53c7-b9f4-931f4a45041a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/bins/x86_64",
      "pattern": "[url:value = 'http://disrupt.anondns.net/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859705/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a70b7dc-7f00-5447-a400-bddeac45e067",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/bins/spc",
      "pattern": "[url:value = 'http://disrupt.anondns.net/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859683/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82169bb8-b335-5816-8073-b2f859033c77",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/arm7",
      "pattern": "[url:value = 'http://no7shmh.shop/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859684/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3149220b-2062-509d-88cb-b6d792e5b89d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/arc",
      "pattern": "[url:value = 'http://no7shmh.shop/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859685/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12fad353-68e7-5dfe-b371-499b94643f1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/spc",
      "pattern": "[url:value = 'http://disrupt.anondns.net/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859686/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d1b4d6d-a1d5-5d1e-88a5-7f9f12e6b73e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/mips",
      "pattern": "[url:value = 'http://disrupt.anondns.net/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859687/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--990826b0-98bb-5143-b316-29a698bb8071",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/arm6",
      "pattern": "[url:value = 'http://no7shmh.shop/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859688/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef23078d-f3c8-5ba5-acab-7bcfa345ba4c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/mpsl",
      "pattern": "[url:value = 'http://no7shmh.shop/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859689/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9db4eac3-aa95-5158-a5aa-6e95463d72c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/bins/x86_64",
      "pattern": "[url:value = 'http://no7shmh.shop/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859690/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95dbfbc4-06f8-5d48-88ce-0d41da6157c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/x86_64",
      "pattern": "[url:value = 'http://no7shmh.shop/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859691/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f9abc0e-6d07-51b5-b171-d6048fe2267e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/arm7",
      "pattern": "[url:value = 'http://disrupt.anondns.net/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859692/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78fb81cb-7ad9-5d1f-9816-e1be34ea63e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/bins/spc",
      "pattern": "[url:value = 'http://no7shmh.shop/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859693/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c45029d1-e27a-5958-a038-f443d54c799f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/arm",
      "pattern": "[url:value = 'http://no7shmh.shop/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859694/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e0f8dba-bdd7-5257-b3ba-8b8b17321769",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/x86",
      "pattern": "[url:value = 'http://disrupt.anondns.net/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859695/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--242ffb90-6993-58e6-90d6-19944a052a4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/arm",
      "pattern": "[url:value = 'http://disrupt.anondns.net/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859696/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e04dde37-9d5d-53b6-a502-1e5eab229ada",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/arc",
      "pattern": "[url:value = 'http://disrupt.anondns.net/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859697/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9563843-06c8-58ea-a9c4-809ba3fe7328",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://disrupt.anondns.net/mpsl",
      "pattern": "[url:value = 'http://disrupt.anondns.net/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859698/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c9bb650-ed04-5808-a5d9-8a865ab4d811",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/m68k",
      "pattern": "[url:value = 'http://no7shmh.shop/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859699/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b106c973-89c4-5fb1-a20a-8b5943541ccf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://no7shmh.shop/sh4",
      "pattern": "[url:value = 'http://no7shmh.shop/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:39:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859700/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--284f8c4e-4d1d-5823-b380-5c6f697078e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.72:39405/i",
      "pattern": "[url:value = 'http://46.236.65.72:39405/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:38:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859682/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2abd3414-3b6d-59d1-afde-ee4191cd1b1c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.58.180:60093/bin.sh",
      "pattern": "[url:value = 'http://27.202.58.180:60093/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:35:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859681/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0c5a75f-5262-5553-907c-2131c8edfc66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.124.159:49498/i",
      "pattern": "[url:value = 'http://219.155.124.159:49498/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:26:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859680/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43cc141e-ded3-5e69-bfa2-f9b63ecbf095",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://1.62.241.196:36599/i",
      "pattern": "[url:value = 'http://1.62.241.196:36599/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:21:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859679/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--608fa048-9430-5219-9811-35fc75bc6d37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.131.133.189:48765/i",
      "pattern": "[url:value = 'http://124.131.133.189:48765/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:16:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859678/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e9cf3c7-b2fd-5cef-a3d0-766089e89f49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.117.58.191:57513/i",
      "pattern": "[url:value = 'http://125.117.58.191:57513/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:11:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859677/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aa11334-2441-5c6b-8392-6bd950cc6981",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jjotnoj.jojobetuyelik.info/6ff7a8b2-b82d-4677-93e5-3556ae2a72fd",
      "pattern": "[url:value = 'https://jjotnoj.jojobetuyelik.info/6ff7a8b2-b82d-4677-93e5-3556ae2a72fd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:07:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859676/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f817455-090e-5db1-b0ea-e4b5a7830539",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.83:36205/i",
      "pattern": "[url:value = 'http://110.36.86.83:36205/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:06:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859675/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--975245a2-4fb0-5bfe-a26e-7c35bf725dc1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://95.9.35.137:35183/i",
      "pattern": "[url:value = 'http://95.9.35.137:35183/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T10:03:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859674/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06d01dd0-33e6-5a26-8354-220cfdbbdc45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.182.186:44028/i",
      "pattern": "[url:value = 'http://123.14.182.186:44028/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:57:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859673/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--048bab90-52ac-590a-a2ad-1ffa6ee0f5a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.124.159:49498/bin.sh",
      "pattern": "[url:value = 'http://219.155.124.159:49498/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859672/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbb4b799-d12c-5ce8-b664-a44fe3716671",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://95.9.35.137:35183/bin.sh",
      "pattern": "[url:value = 'http://95.9.35.137:35183/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:39:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859671/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--991dbdf6-be88-5dbf-b91a-90e9c3f25def",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.120.105:34489/i",
      "pattern": "[url:value = 'http://182.116.120.105:34489/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859670/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24255e09-81db-5fbf-b02a-b1b393bb235e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zvxeaqm.jogodobicho.games/b62bc1c0-326f-4cf3-b82e-8ce3c4f1a6b5",
      "pattern": "[url:value = 'https://zvxeaqm.jogodobicho.games/b62bc1c0-326f-4cf3-b82e-8ce3c4f1a6b5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859669/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d03a7884-d4ad-5524-b5b7-4a0807de60b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.153:43421/i",
      "pattern": "[url:value = 'http://163.142.92.153:43421/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859668/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2595b3f-685e-53be-be84-2b166b5a6a0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.100.225.82:40323/i",
      "pattern": "[url:value = 'http://36.100.225.82:40323/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:26:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859667/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64b26182-cc13-500c-977e-2acd5b77d158",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://6ju7fjjz.bordoo.bet/?ublib=d7d4aa57-22fe-4967-9339-ef9137170c91",
      "pattern": "[url:value = 'https://6ju7fjjz.bordoo.bet/?ublib=d7d4aa57-22fe-4967-9339-ef9137170c91']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:24:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859666/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88c2876f-f477-59c5-acab-0823efd449ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.92.37:41074/i",
      "pattern": "[url:value = 'http://163.142.92.37:41074/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:17:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859665/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dbcc65d-eae1-58ef-9243-63c232b9389c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.147.205.235:49208/bin.sh",
      "pattern": "[url:value = 'http://175.147.205.235:49208/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:13:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859664/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--479450df-0f5b-51ad-81cc-1c8d9707d9be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://149.71.39.60:49619/i",
      "pattern": "[url:value = 'http://149.71.39.60:49619/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:08:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859663/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79e2ad59-a360-5253-a70e-bad56067bf5f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.189.31.218:43801/i",
      "pattern": "[url:value = 'http://27.189.31.218:43801/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:06:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859662/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25df1049-c339-5580-a48d-5859844a5197",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.93.102:34093/i",
      "pattern": "[url:value = 'http://163.142.93.102:34093/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:04:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859661/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b02efb94-ebec-5c40-8623-dcf7ea1a5623",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://4lm4v3bu.bet404.games/?ublib=9c789c9a-2500-4ff9-876e-a0f1fe073b29",
      "pattern": "[url:value = 'https://4lm4v3bu.bet404.games/?ublib=9c789c9a-2500-4ff9-876e-a0f1fe073b29']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859660/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d68b6e80-a9a4-56a9-9f24-a8183d99eb2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.146.137:55021/bin.sh",
      "pattern": "[url:value = 'http://221.15.146.137:55021/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:02:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859659/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4743d0cf-4bd3-58ad-b87b-b12bc22e6f01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.93.98:48312/i",
      "pattern": "[url:value = 'http://163.142.93.98:48312/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T09:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859658/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57758dbe-1a3e-58d2-b0cc-1023b3a217c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jrpzgr.jamejahani.bet/7c6c8d19-6269-4bbc-b56f-ee0ab6b3fdce",
      "pattern": "[url:value = 'https://jrpzgr.jamejahani.bet/7c6c8d19-6269-4bbc-b56f-ee0ab6b3fdce']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859657/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f1b6d94-5d6b-5008-8289-e17be526eeaf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.221.182:56103/i",
      "pattern": "[url:value = 'http://110.38.221.182:56103/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859656/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8be16db-9db2-55eb-afe6-22c53da0dffd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.100.225.82:40323/bin.sh",
      "pattern": "[url:value = 'http://36.100.225.82:40323/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:50:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859655/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ede9af4-4aca-5c7a-8995-52506d0b5bf1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vvxcqgv.jamjahani.world/ebe27db7-5c7b-43e4-91f2-e6929b5fa13e",
      "pattern": "[url:value = 'https://vvxcqgv.jamjahani.world/ebe27db7-5c7b-43e4-91f2-e6929b5fa13e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:50:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859654/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73e6389e-c145-58cb-b582-666e9519e247",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://162.250.16.22:34173/bin.sh",
      "pattern": "[url:value = 'http://162.250.16.22:34173/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:47:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859653/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a58a260d-18ee-5145-a419-09dfd87a55b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.43.248.167:46857/i",
      "pattern": "[url:value = 'http://125.43.248.167:46857/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:42:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859652/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1921cf51-a47b-58ec-a0e5-34efd799952e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xn--b1amdnf.st-rpl-diff-node.in.net/s5test",
      "pattern": "[url:value = 'https://xn--b1amdnf.st-rpl-diff-node.in.net/s5test']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:22:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859651/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--775c4674-e0a1-5487-b859-6c1a18884eb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.83.229:55144/i",
      "pattern": "[url:value = 'http://61.53.83.229:55144/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:17:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859650/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20d2cd8a-392f-56d8-a410-cb062d6360e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.43.248.167:46857/bin.sh",
      "pattern": "[url:value = 'http://125.43.248.167:46857/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:16:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859649/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--596de879-e85a-5b0c-91f6-eb1f30dac6d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.95.161:50050/i",
      "pattern": "[url:value = 'http://61.53.95.161:50050/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:16:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859648/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bfa2183-8b81-5701-8710-af54676092cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ubzfosw.jamjahani.win/bf4ef6f9-1fe4-4657-9899-5432e1c48309",
      "pattern": "[url:value = 'https://ubzfosw.jamjahani.win/bf4ef6f9-1fe4-4657-9899-5432e1c48309']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859647/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--383e180d-5194-5fb4-99ca-ab79b5b4c75e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://213.159.34.52:58201/i",
      "pattern": "[url:value = 'http://213.159.34.52:58201/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T08:11:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859646/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ca4b51-19bc-5313-a007-f3f59ad68b81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.138.211:34657/i",
      "pattern": "[url:value = 'http://115.49.138.211:34657/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:53:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859645/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9fab933-5398-50d8-b01f-aef1b2dc1867",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ofwbhuk.jamjahani.website/b6e8e0d1-e909-4732-8870-effba4034f5a",
      "pattern": "[url:value = 'https://ofwbhuk.jamjahani.website/b6e8e0d1-e909-4732-8870-effba4034f5a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:33:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859644/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--646c49ec-decf-5959-a120-49e28e38a55a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.207.186.37:47926/i",
      "pattern": "[url:value = 'http://27.207.186.37:47926/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859643/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ed5d2a8-d17b-5b94-9ecd-7234449796cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.39.221:56750/i",
      "pattern": "[url:value = 'http://125.40.39.221:56750/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:24:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859642/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4840d8cb-8abe-5b5a-a8a3-b3a6d68d6226",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zxuq0oha.bord90.bet/?ublib=e90c3f51-c48a-47c2-b8b4-b3eb26393406",
      "pattern": "[url:value = 'https://zxuq0oha.bord90.bet/?ublib=e90c3f51-c48a-47c2-b8b4-b3eb26393406']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:19:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859641/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aae2eb00-bb57-5244-a31c-529752d52f75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.96.140.116:55670/i",
      "pattern": "[url:value = 'http://59.96.140.116:55670/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:11:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859640/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--babc7ac8-5a0b-5126-b5ca-b3210961097a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jolly-bread-f04e.deborahbmuellerziytqsjw7623.workers.dev/EjdhukaB",
      "pattern": "[url:value = 'https://jolly-bread-f04e.deborahbmuellerziytqsjw7623.workers.dev/EjdhukaB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859639/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--805182c7-e13c-54bd-afc0-05b959605fba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jolly-bread-f04e.deborahbmuellerziytqsjw7623.workers.dev/EjdhukaB.html",
      "pattern": "[url:value = 'https://jolly-bread-f04e.deborahbmuellerziytqsjw7623.workers.dev/EjdhukaB.html']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859638/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--528c61ce-a147-5ddf-9fbb-aae4d9e9ec3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/x86",
      "pattern": "[url:value = 'http://31.56.209.165:8091/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859635/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6745adcf-3ab5-5139-8b49-7e44c6ee9d7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/arm64",
      "pattern": "[url:value = 'http://31.56.209.165:8091/arm64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859636/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25777fdb-cb33-5d51-825a-d14f174c4ded",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/arm5",
      "pattern": "[url:value = 'http://31.56.209.165:8091/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859637/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02a677ad-00de-56d3-8bea-18f9deb04538",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/ppc64le",
      "pattern": "[url:value = 'http://31.56.209.165:8091/ppc64le']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859634/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33b5936c-69b9-51c4-96c1-536124b92e1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/arm6",
      "pattern": "[url:value = 'http://31.56.209.165:8091/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859633/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d117826-5a78-52c7-97f2-d39587dee5d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/s390x",
      "pattern": "[url:value = 'http://31.56.209.165:8091/s390x']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859632/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef50cd25-f32b-514f-9140-31f750b896b2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/amd64",
      "pattern": "[url:value = 'http://31.56.209.165:8091/amd64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859631/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b645102-2085-589f-aab8-5b4419ed11b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/arm7",
      "pattern": "[url:value = 'http://31.56.209.165:8091/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:05:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859630/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a11004c-c44c-5000-be62-dafd5ac96f81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/qUbz",
      "pattern": "[url:value = 'http://188.132.232.81/qUbz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859629/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16ebd4ba-5c8d-50b3-95ce-05f369938239",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/aRi",
      "pattern": "[url:value = 'http://188.132.232.81/aRi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859624/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9fc7170-e152-5baa-93ae-54bf65f0a7d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/6gfV",
      "pattern": "[url:value = 'http://188.132.232.81/6gfV']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859625/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15c0f669-c75b-56fb-9473-564a272ff699",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/gSN",
      "pattern": "[url:value = 'http://188.132.232.81/gSN']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859626/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dceeeec-9794-5fd8-bd1e-7b4cd39295f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/T7JM",
      "pattern": "[url:value = 'http://188.132.232.81/T7JM']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859627/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a95eb746-fc8a-5662-8f9f-00c1bd3a2304",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Lqcu",
      "pattern": "[url:value = 'http://188.132.232.81/Lqcu']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859628/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2d4347f-3efa-5905-afab-c2238aac5df6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/ppc64",
      "pattern": "[url:value = 'http://31.56.209.165:8091/ppc64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859605/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18e20e3d-f07c-5331-9e31-3620efbe33ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/mipsel",
      "pattern": "[url:value = 'http://31.56.209.165:8091/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859606/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54c578cf-2484-545e-a461-1e359d38a595",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/mips64",
      "pattern": "[url:value = 'http://31.56.209.165:8091/mips64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859607/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec3851ab-7ae7-5c4a-ae80-1e20fe95cbd0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/mips",
      "pattern": "[url:value = 'http://31.56.209.165:8091/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859608/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51f6a06a-99ce-523b-a8f0-0fe41b21cff5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/mips64el",
      "pattern": "[url:value = 'http://31.56.209.165:8091/mips64el']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859609/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1386a423-c58c-5bb3-9edc-724355c5c715",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.124/hiddenbin/boatnet.i468",
      "pattern": "[url:value = 'http://176.65.149.124/hiddenbin/boatnet.i468']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859610/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae4287b5-9fad-5460-82a2-f82f4667d479",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/w1s",
      "pattern": "[url:value = 'http://188.132.232.81/w1s']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859611/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83f4bb66-51fb-5525-bd69-0859d7dcb0c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/cYH",
      "pattern": "[url:value = 'http://188.132.232.81/cYH']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859612/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d04dc2ce-6f19-5813-b08c-77cc67b131c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/olPe",
      "pattern": "[url:value = 'http://188.132.232.81/olPe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859613/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b528370-6613-509e-9105-24da63d5ddae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Fhax",
      "pattern": "[url:value = 'http://188.132.232.81/Fhax']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859614/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef751ddd-a0b9-5291-b217-351ce4b3475e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/hvSs",
      "pattern": "[url:value = 'http://188.132.232.81/hvSs']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859615/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d572f621-01d7-5c38-b641-43891e0d5243",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/UbI",
      "pattern": "[url:value = 'http://188.132.232.81/UbI']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859616/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2e073bc-243d-57c1-bd81-495c04deb30e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/cl0X",
      "pattern": "[url:value = 'http://188.132.232.81/cl0X']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859617/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cb93540-1b81-555e-bf12-52030446bf66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.124/hiddenbin/boatnet.i686",
      "pattern": "[url:value = 'http://176.65.149.124/hiddenbin/boatnet.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859618/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d84d63dc-eae3-5891-9d67-c688b30b829b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/CYld",
      "pattern": "[url:value = 'http://188.132.232.81/CYld']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859619/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45aa9fa3-2218-5afe-bc6c-97bacc5bc3d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.124/hiddenbin/boatnet.x86_64",
      "pattern": "[url:value = 'http://176.65.149.124/hiddenbin/boatnet.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859620/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcbd81ba-08d8-5e62-a014-5a3525fcab24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/3gGa",
      "pattern": "[url:value = 'http://188.132.232.81/3gGa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859621/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd6f5ec0-5f65-59e0-aa2a-8fbecabb60cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/qX2n",
      "pattern": "[url:value = 'http://188.132.232.81/qX2n']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859622/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4579fd33-919b-5f07-b095-5155417db609",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/sXV",
      "pattern": "[url:value = 'http://188.132.232.81/sXV']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859623/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e65a64e-640b-59ba-ae09-be12637119c6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/VXyc",
      "pattern": "[url:value = 'http://188.132.232.81/VXyc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859602/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9ddae89-a3e6-5408-bef7-1eae2a71a3b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Q6Yy",
      "pattern": "[url:value = 'http://188.132.232.81/Q6Yy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859603/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32b90f2c-ee29-532a-bedd-21b66e14f15f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/VcgC",
      "pattern": "[url:value = 'http://188.132.232.81/VcgC']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859604/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18cf53a2-f808-51f3-97e4-759037a13685",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/VsCC",
      "pattern": "[url:value = 'http://188.132.232.81/VsCC']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859597/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14110f2d-ef86-567f-8b2c-1e653d1f1bb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/yjJk",
      "pattern": "[url:value = 'http://188.132.232.81/yjJk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859598/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e05f38d1-3e03-5b05-bf4c-cc8d7ec3d8a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ill",
      "pattern": "[url:value = 'http://188.132.232.81/ill']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859599/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb5c9637-a499-5998-b542-7bcf3df3ad97",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/aDaH",
      "pattern": "[url:value = 'http://188.132.232.81/aDaH']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859600/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bce901a-1332-5825-a6a9-071fce837a9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/TjGR",
      "pattern": "[url:value = 'http://188.132.232.81/TjGR']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:03:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859601/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bbb0c55-db67-586d-916b-b4ed891c543d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.101.161:37345/i",
      "pattern": "[url:value = 'http://112.248.101.161:37345/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:01:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859596/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9e22c00-f9af-5131-a0ab-90767d8e308c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.arm5",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:01:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859595/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d0d8170-6f8f-5f13-a806-a4562cec043c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.arm6",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T07:00:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859594/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f38dc6bb-80ee-5add-8306-1f456fe8d4f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.m68k",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859589/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5c538b1-6a61-510c-a27e-0cd991ae9cd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.mpsl",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859590/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0140b92d-a8fd-524b-825a-f39f8deebed1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.arm64",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.arm64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859591/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f5f4fb7-8215-5a1d-a24d-2ade5635dc05",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.ppc",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859592/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9814e55-8c33-5c21-912b-6b133b2015c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.x86_64",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859593/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26c6aa60-5f65-5bca-9c8a-7b7d39c4250b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.arm7",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859583/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651b17f8-1e52-51a2-b374-f8938dd7d441",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.sh4",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859584/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e98d49d5-4db7-5123-b6f6-da9f6ef29d58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.arm",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859585/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e3e5d0d-f61e-5082-88f5-080b8658f639",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.x86_64_srv",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.x86_64_srv']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859586/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6e2f99a-f30a-56cc-b31e-1d7c14739b82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.mips64",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.mips64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859587/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c3dc95f-7492-5c9e-8df4-e3cab6491cfe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.mips",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859588/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2814492-138e-58d5-8962-52e342b7b757",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.x86",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859581/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2207c1f-1886-5cc5-b7c1-b9a7a5a01272",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/bins/kaizen.spc",
      "pattern": "[url:value = 'http://176.65.149.168/bins/kaizen.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:59:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859582/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7c313af-7813-515f-82dc-1e92c414557b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/POWERPC",
      "pattern": "[url:value = 'http://94.183.232.247/POWERPC']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:57:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859579/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--840f2ec2-18d4-56ec-97a1-9fdf8bc35547",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/MIPS",
      "pattern": "[url:value = 'http://94.183.232.247/MIPS']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:57:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859580/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a46b1e8-2987-5023-afe1-b287e6fc8086",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://khndao.x50wheel.bet/fa031150-2790-446f-8996-d9d7e288a614",
      "pattern": "[url:value = 'https://khndao.x50wheel.bet/fa031150-2790-446f-8996-d9d7e288a614']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859578/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40467577-8799-5536-8e55-5082075c6064",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.95.161:50050/bin.sh",
      "pattern": "[url:value = 'http://61.53.95.161:50050/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859577/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7ec2ebc-2033-561c-afad-5b5f3888168a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/I586",
      "pattern": "[url:value = 'http://94.183.232.247/I586']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:56:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859576/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a26d0955-498d-5870-ac9a-0064e6e2c154",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/X86_64",
      "pattern": "[url:value = 'http://94.183.232.247/X86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:55:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859574/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5029ef6-6039-5512-b968-9f52ee31b5bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/I686",
      "pattern": "[url:value = 'http://94.183.232.247/I686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:55:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859575/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cf45a7e-aa77-5b10-93c1-8a4398d53eae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://piciidq.jamjahani.vip/c6e061ed-9452-4c71-abd5-afc8e4bee6ed",
      "pattern": "[url:value = 'https://piciidq.jamjahani.vip/c6e061ed-9452-4c71-abd5-afc8e4bee6ed']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859573/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83239b85-169a-5464-9d45-5de5c650b442",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/Ciabins.sh",
      "pattern": "[url:value = 'http://94.183.232.247/Ciabins.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859571/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9d5e83e-83a5-55bf-a08a-9c92980c763a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/M68K",
      "pattern": "[url:value = 'http://94.183.232.247/M68K']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859572/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7b4b469-55b5-5706-ba9a-7dd3fc79c5d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/MIPSEL",
      "pattern": "[url:value = 'http://94.183.232.247/MIPSEL']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859565/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7114b950-cab3-5f19-b0f2-3d2f21a6717e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/ARMV6L",
      "pattern": "[url:value = 'http://94.183.232.247/ARMV6L']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859566/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22d68065-ed76-5538-9ee7-81edd25aa996",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/ARMV4L",
      "pattern": "[url:value = 'http://94.183.232.247/ARMV4L']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859567/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69c5a7c7-d7c8-5faa-9b23-81cc60a6c97d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/SPARC",
      "pattern": "[url:value = 'http://94.183.232.247/SPARC']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859568/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--313f9e21-422c-5a7b-9b43-0a246077edd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/ARMV5L",
      "pattern": "[url:value = 'http://94.183.232.247/ARMV5L']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859569/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4cdc9b3-e9da-5471-8c8b-336741e4f162",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/SH4",
      "pattern": "[url:value = 'http://94.183.232.247/SH4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859570/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dced35e-7ae7-59ba-97bc-13f14bd958a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168/dlink.sh",
      "pattern": "[url:value = 'http://176.65.149.168/dlink.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:50:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859564/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b67ac9ce-075d-537e-a90c-6daee3391eee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.168.ptr.pfcloud.network/dlink.sh",
      "pattern": "[url:value = 'http://176.65.149.168.ptr.pfcloud.network/dlink.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:50:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859563/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99509d39-3056-5149-8513-b76673fddcda",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.231.30:49835/i",
      "pattern": "[url:value = 'http://27.202.231.30:49835/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:49:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859562/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a5858eb-f537-5b16-8282-e95732de1311",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.96.140.116:55670/bin.sh",
      "pattern": "[url:value = 'http://59.96.140.116:55670/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:46:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859561/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86318d62-24ab-5942-9ff7-3df191badf13",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.83.229:55144/bin.sh",
      "pattern": "[url:value = 'http://61.53.83.229:55144/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:41:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859560/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1af6aef9-e45b-5ef9-8085-46590e7d08c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.211.63.25:34181/i",
      "pattern": "[url:value = 'http://27.211.63.25:34181/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:36:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859559/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74bc5947-7964-5d92-9d8a-7e4758dc0d3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.199.227:54179/i",
      "pattern": "[url:value = 'http://123.12.199.227:54179/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:33:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859558/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a45d7e5c-c9e1-5f92-b8df-0916a2220126",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.231.122.31:58597/bin.sh",
      "pattern": "[url:value = 'http://113.231.122.31:58597/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:28:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859557/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--571899af-a6ff-53ee-af4e-83be1ab5b91e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mipcepl.jamjahani.site/cd2011b0-8d5e-4f6e-a213-d97626ad40d7",
      "pattern": "[url:value = 'https://mipcepl.jamjahani.site/cd2011b0-8d5e-4f6e-a213-d97626ad40d7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:20:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859556/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b72767e1-3f48-59a8-97ed-473dcb9993f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.199.227:54179/bin.sh",
      "pattern": "[url:value = 'http://123.12.199.227:54179/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:12:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859555/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3b79107-1594-5ddc-8e18-0a049de5eba0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://211.158.161.158:34707/i",
      "pattern": "[url:value = 'http://211.158.161.158:34707/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859554/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e9b92a2-5312-5ce7-8ee7-5679b66fab49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.198.224.38/b",
      "pattern": "[url:value = 'http://45.198.224.38/b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:01:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859553/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b3fde2a-1154-5327-8644-7375c22abe53",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wwiiiss.oss-ap-northeast-1.aliyuncs.com/ToDsoerd-sreuir-x6.3.1.zip",
      "pattern": "[url:value = 'https://wwiiiss.oss-ap-northeast-1.aliyuncs.com/ToDsoerd-sreuir-x6.3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:00:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859552/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bd22ee0-4d6b-59da-8404-182eac7c3e23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-334a6be7ee8b454c80d466d86642d2f1.r2.dev/ludashi7.zip",
      "pattern": "[url:value = 'https://pub-334a6be7ee8b454c80d466d86642d2f1.r2.dev/ludashi7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:00:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859551/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b45b8b19-4062-551f-992d-2d1f9b6af673",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.pekj1403.com/aianl",
      "pattern": "[url:value = 'https://www.pekj1403.com/aianl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:00:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859550/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf9add7a-a95b-529f-856f-b3029903f72c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.165:8091/zb.sh",
      "pattern": "[url:value = 'http://31.56.209.165:8091/zb.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859549/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acb1fda7-1b86-5cf3-9b63-1de71874b43f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.198.224.38//arm7",
      "pattern": "[url:value = 'http://45.198.224.38//arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859547/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d7b2ff7-5197-5976-8c13-b88204cb94fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.198.224.38/aaa",
      "pattern": "[url:value = 'http://45.198.224.38/aaa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T06:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859548/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88e82673-3c17-5f79-b748-ebd57b424f79",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.125.230:43394/i",
      "pattern": "[url:value = 'http://123.9.125.230:43394/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859546/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7614367-ef4e-504a-abd4-11a870307e82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.50.36.20:52902/i",
      "pattern": "[url:value = 'http://115.50.36.20:52902/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859545/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1a17d02-3f96-5036-9fe6-1e79fada8825",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://211.158.161.158:34707/bin.sh",
      "pattern": "[url:value = 'http://211.158.161.158:34707/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859544/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--491f9e95-5a05-5f98-835f-6109681537e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gvrrgvn.jamjahani.promo/83ea7fa9-1ef1-4b7e-a572-031fc2cb10d2",
      "pattern": "[url:value = 'https://gvrrgvn.jamjahani.promo/83ea7fa9-1ef1-4b7e-a572-031fc2cb10d2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859543/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--930425c3-b664-53bd-87f7-530f8fca0e94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.125.230:43394/bin.sh",
      "pattern": "[url:value = 'http://123.9.125.230:43394/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859542/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b797ce1b-25b0-5926-92df-955af37e4817",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.229.222.209:47687/i",
      "pattern": "[url:value = 'http://42.229.222.209:47687/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:25:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859541/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb0910a4-ed2f-56cf-baaf-2a51215050a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.229.222.209:47687/bin.sh",
      "pattern": "[url:value = 'http://42.229.222.209:47687/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:24:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859540/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e426c3cf-a5c9-5d8f-bdef-7a2aa87a44cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kaxofkea.bizbetslot.net/?ublib=1006c035-3b09-458d-85af-ef2999bf8d1d",
      "pattern": "[url:value = 'https://kaxofkea.bizbetslot.net/?ublib=1006c035-3b09-458d-85af-ef2999bf8d1d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:18:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859539/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f231d9a-bac2-53ff-aeba-61c4d3cfa00b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zwbnyop.jamjahani.org/4a69775a-13f6-4b60-a5fe-d706cf5f429e",
      "pattern": "[url:value = 'https://zwbnyop.jamjahani.org/4a69775a-13f6-4b60-a5fe-d706cf5f429e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T05:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859538/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56179e08-2137-5e8e-85d4-550b6d57afd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://eizgbh.xenicalby6.com/4e7f3743-f802-4657-b764-185641e1e8ba",
      "pattern": "[url:value = 'https://eizgbh.xenicalby6.com/4e7f3743-f802-4657-b764-185641e1e8ba']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859537/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1769caa7-2faa-5d64-8e43-ab7a26f3b538",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.64.6:39760/bin.sh",
      "pattern": "[url:value = 'http://123.188.64.6:39760/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:53:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859536/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--616ba9f1-7a94-5a1f-a751-ff243134dd3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.85.110.38:41787/i",
      "pattern": "[url:value = 'http://110.85.110.38:41787/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:44:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859535/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95a3cc30-46a5-5f1f-ab4b-7084a79fdf07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.96.137.169:33582/i",
      "pattern": "[url:value = 'http://59.96.137.169:33582/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:33:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859534/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--405dca2d-8197-5ef8-9e5e-d1c749e21c1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rmjjmzw.jamjahani.online/08b79f05-9125-42fa-8a9f-ea1c4dd0f962",
      "pattern": "[url:value = 'https://rmjjmzw.jamjahani.online/08b79f05-9125-42fa-8a9f-ea1c4dd0f962']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:20:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859533/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76ff65ce-a5f9-5479-b534-72ae3b3f62eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.107.155:34232/i",
      "pattern": "[url:value = 'http://42.231.107.155:34232/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:18:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859532/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44678e59-c5bd-5bc9-8581-5c8d77722e9b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.96.137.169:33582/bin.sh",
      "pattern": "[url:value = 'http://59.96.137.169:33582/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859531/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44de7c4f-e0b5-59a8-9cbe-6c5c21bd16fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zbc7yta5.taktiik.bet/?ublib=f010821d-6c31-43eb-a91d-77e2dc1a6955",
      "pattern": "[url:value = 'https://zbc7yta5.taktiik.bet/?ublib=f010821d-6c31-43eb-a91d-77e2dc1a6955']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859530/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03f5453c-0e09-5a1b-90ff-3034e5f3c197",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.95.54:59876/i",
      "pattern": "[url:value = 'http://115.58.95.54:59876/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859529/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ff829f2-e73c-5376-bd42-1362ee5c5793",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.202.54.102:46758/i",
      "pattern": "[url:value = 'http://115.202.54.102:46758/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:01:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859528/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94626012-4e4d-53b7-b5c7-d3674729cecc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.113.57:42249/bin.sh",
      "pattern": "[url:value = 'http://182.121.113.57:42249/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T04:00:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859527/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2363f05-650e-59ee-bae3-5e06510403d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.71.160:55615/bin.sh",
      "pattern": "[url:value = 'http://182.119.71.160:55615/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:51:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859526/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e889c12e-f3d5-5ed2-9a94-71ee7241044a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mltwwtn.jamjahani.one/4e555b4a-3d63-4fa2-af74-1be6c6c267c4",
      "pattern": "[url:value = 'https://mltwwtn.jamjahani.one/4e555b4a-3d63-4fa2-af74-1be6c6c267c4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859525/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--451bcdff-fabf-5b76-baa7-0097fdb0c751",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.95.54:59876/bin.sh",
      "pattern": "[url:value = 'http://115.58.95.54:59876/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859524/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef92959a-a3f0-554a-b517-2cb143897214",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.90.188.159:55560/i",
      "pattern": "[url:value = 'http://39.90.188.159:55560/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:35:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859523/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1868f4b-1ffe-5e17-9f01-ca6b408f1522",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.42.90.43:56735/i",
      "pattern": "[url:value = 'http://59.42.90.43:56735/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:33:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859522/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe395440-6a75-5406-9e7a-1ec570f6b02b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.107.155:34232/bin.sh",
      "pattern": "[url:value = 'http://42.231.107.155:34232/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859521/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efcb6fe7-ba18-56e1-817c-57b9a5278ecf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.190.11.194:37405/i",
      "pattern": "[url:value = 'http://196.190.11.194:37405/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:18:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859520/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eacfe062-3513-5f9b-98bc-d49e263e990b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://e6ce6uwg.bingobet90.com/?ublib=a027b003-c199-4191-90c5-c03802495f9c",
      "pattern": "[url:value = 'https://e6ce6uwg.bingobet90.com/?ublib=a027b003-c199-4191-90c5-c03802495f9c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859519/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f2ba07b-9cc9-5395-a3e2-2bfa9f8b4f8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.90.188.159:55560/bin.sh",
      "pattern": "[url:value = 'http://39.90.188.159:55560/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:10:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859518/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1ab205d-0e0b-5598-a2b1-86047815fde6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.42.90.43:56735/bin.sh",
      "pattern": "[url:value = 'http://59.42.90.43:56735/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:05:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859517/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a812de3e-04cc-5d24-b9c7-e0cbf6e2cd48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.80.62:33912/i",
      "pattern": "[url:value = 'http://222.137.80.62:33912/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:04:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859516/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97651aa6-1fd9-530f-a82e-30044c8fe683",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kyxuncq.jamjahani.net/4dd869f3-d2d5-46cb-bd77-e04cd21ec65e",
      "pattern": "[url:value = 'https://kyxuncq.jamjahani.net/4dd869f3-d2d5-46cb-bd77-e04cd21ec65e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859515/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d574d229-d720-512d-aa81-6c0f20228c6a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gukxgn.yasbet90.com/9161f977-669c-438c-90ec-c172e0d1b429",
      "pattern": "[url:value = 'https://gukxgn.yasbet90.com/9161f977-669c-438c-90ec-c172e0d1b429']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T03:00:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859514/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8b54e3f-85c8-550b-a342-bd76026d5953",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.190.11.194:37405/bin.sh",
      "pattern": "[url:value = 'http://196.190.11.194:37405/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:54:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859513/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--106d0fe3-c23c-5cb3-84c1-fa7156b3aa37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.221.182:56103/bin.sh",
      "pattern": "[url:value = 'http://110.38.221.182:56103/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:48:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859512/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d90cc68-7e01-59f2-9a42-d8de22419501",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.166.194:34505/i",
      "pattern": "[url:value = 'http://182.119.166.194:34505/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:44:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859511/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--091884bc-c08f-5d42-9d49-3328fe868849",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.211.63.25:34181/bin.sh",
      "pattern": "[url:value = 'http://27.211.63.25:34181/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:37:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859510/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bd17518-531b-58ce-94ac-74d239e12537",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.80.62:33912/bin.sh",
      "pattern": "[url:value = 'http://222.137.80.62:33912/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:35:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859509/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76b8c800-979a-5f31-b787-8f59a39af41c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drlycjl.jamjahani.mobi/19876d21-b11c-4e85-9759-bb17bf25d7b5",
      "pattern": "[url:value = 'https://drlycjl.jamjahani.mobi/19876d21-b11c-4e85-9759-bb17bf25d7b5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:25:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859508/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c224ded-418f-5825-8186-d40aacc2f24d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.208.111.235:50602/i",
      "pattern": "[url:value = 'http://222.208.111.235:50602/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:22:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859507/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdb8f546-a88a-5222-b169-1a7f371d071d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pjnmfyn.yekbetiran.com/7d1195a3-60e7-43d3-ad2e-9b938bee3e2e",
      "pattern": "[url:value = 'https://pjnmfyn.yekbetiran.com/7d1195a3-60e7-43d3-ad2e-9b938bee3e2e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:15:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859506/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2c98106-cdff-518f-bc17-21d53875c1c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qffjprx.yektbet.bet/82af0036-6a64-4584-a1fe-e8e460f8c6cc",
      "pattern": "[url:value = 'https://qffjprx.yektbet.bet/82af0036-6a64-4584-a1fe-e8e460f8c6cc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T02:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859505/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--885b945e-dc0f-57e7-a999-7e1a41e05f28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://80.67.33.209:38158/i",
      "pattern": "[url:value = 'http://80.67.33.209:38158/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:57:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859504/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05585e9e-a84a-59df-8057-8f3bce5b1946",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://fljmkds.venusbet90.com/d939d304-3934-4934-86af-d157a8c012f0",
      "pattern": "[url:value = 'https://fljmkds.venusbet90.com/d939d304-3934-4934-86af-d157a8c012f0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:56:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859503/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47addd58-3b2c-5ee6-a65e-31754d5a4470",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.208.111.235:50602/bin.sh",
      "pattern": "[url:value = 'http://222.208.111.235:50602/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859502/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06d2c7ad-d328-5cab-891a-e73eef8a79cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.46.147.157:45474/i",
      "pattern": "[url:value = 'http://125.46.147.157:45474/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:41:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859501/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd082760-dbc1-5378-96ca-ed06df24ea74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.25.33:35469/i",
      "pattern": "[url:value = 'http://110.36.25.33:35469/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:31:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859500/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d8db59d-7de5-5d93-ac6f-5a4bf15da293",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://80.67.33.209:38158/bin.sh",
      "pattern": "[url:value = 'http://80.67.33.209:38158/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859492/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfbe9d93-c3bb-5a5e-be8d-614d88cc16d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.i486",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859493/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f537d481-2ec5-596f-8019-59668d9faa07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.x86_64",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859494/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0066533e-29c1-551f-8f58-7aeadeaf15b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.aarch64",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859495/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb4df134-cda2-515c-91cf-1000fa24ae25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.mipsel",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859496/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90004a4e-a538-5057-af89-8f0eb8df464f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.mips",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859497/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afc501f7-8acc-509e-9f32-891c5f43c687",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.sh4",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859498/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bc2dc07-b19e-5288-b41a-67117b40b73c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.armv6l",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859499/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a5d13de-bd00-52ef-91d5-e3a14465f1c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.arc",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:29:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859491/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b844230-3e1c-5e0c-a04b-8ae6da7807e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.m68k",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:28:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859490/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e8f51a1-8769-52be-877d-536a8199dcd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.armv4l",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:28:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859486/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--523ba957-c2f6-5d26-8b20-dfa8bb052fb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.armv5l",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:28:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859487/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21aa2abf-53ec-5d72-9ad1-cf9883931902",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.sparc",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:28:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859488/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e1381d9-b81c-514e-ba0b-affb716288fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.armv7l",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:28:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859489/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd8b0050-3ab5-5b24-ae14-aaecf3c11acc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/.Sassy.powerpc",
      "pattern": "[url:value = 'http://176.65.139.126/.Sassy.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:28:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859485/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8a4c99b-483d-5eab-bf5e-91e0d19bc09c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.126/cat.sh",
      "pattern": "[url:value = 'http://176.65.139.126/cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:28:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859484/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a51ec93-c282-5825-b75a-7807d2a60cb5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.91.62.65:39927/bin.sh",
      "pattern": "[url:value = 'http://103.91.62.65:39927/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:25:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859483/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48a984f3-e3fd-55ca-b53f-0d770ff48dab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hwujtlx.dahdahtoys.com/2f890b55-33a2-41b4-88be-458bc1054cf3",
      "pattern": "[url:value = 'https://hwujtlx.dahdahtoys.com/2f890b55-33a2-41b4-88be-458bc1054cf3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:18:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859481/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e904b38-3332-569c-9f83-72c8b6a7d987",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://1822jtv8.betwoonuyelik.com/?ublib=8e718128-66f8-434e-91d9-1d243197c78b",
      "pattern": "[url:value = 'https://1822jtv8.betwoonuyelik.com/?ublib=8e718128-66f8-434e-91d9-1d243197c78b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:18:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859482/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92c1a304-c87f-5326-b74c-69724c911f69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.132.117:58676/bin.sh",
      "pattern": "[url:value = 'http://115.58.132.117:58676/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:06:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859480/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9f8b273-7c80-5c4f-a682-4a8a2c008bd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.6.84.128:50383/bin.sh",
      "pattern": "[url:value = 'http://42.6.84.128:50383/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T01:02:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859479/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f81e8f6-24ed-55a6-ac29-5526572d8bb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qyqetw.yasbetapp.com/3c1c00ee-ea95-424b-87e6-69a688ac19fc",
      "pattern": "[url:value = 'https://qyqetw.yasbetapp.com/3c1c00ee-ea95-424b-87e6-69a688ac19fc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:55:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859478/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40cf8547-4078-507d-8e1c-785338f16781",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.158.246:33825/i",
      "pattern": "[url:value = 'http://115.56.158.246:33825/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:52:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859477/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dd5a40b-5a25-53e2-b400-6188652094fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.245.71:55370/i",
      "pattern": "[url:value = 'http://123.9.245.71:55370/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:49:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859476/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8b9da4b-d077-5428-be79-eb3fbf00a046",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.158.246:33825/bin.sh",
      "pattern": "[url:value = 'http://115.56.158.246:33825/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:35:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859475/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9e8130f-d0cd-5bf6-8f83-9887b045aa15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jbwhmuq.i90.bet/a9b3ec9d-623c-4e1d-b021-cee264643b3f",
      "pattern": "[url:value = 'https://jbwhmuq.i90.bet/a9b3ec9d-623c-4e1d-b021-cee264643b3f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:35:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859474/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42ebcee0-3232-52a6-9309-6ca42dcaa8fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.18.120.39:45482/i",
      "pattern": "[url:value = 'http://60.18.120.39:45482/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:29:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859473/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--514a121f-030e-5fed-a295-3de1c696d081",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://aknkoyw.homa.bet/e04bd510-3684-495a-8d21-aac426081c6a",
      "pattern": "[url:value = 'https://aknkoyw.homa.bet/e04bd510-3684-495a-8d21-aac426081c6a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:25:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859472/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c20aef05-02ae-509a-9b55-d1f9b92a1cbc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.84.38:52992/i",
      "pattern": "[url:value = 'http://163.142.84.38:52992/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:24:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859471/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e87c49ce-7af8-5fc6-91ad-e7be0b47d61b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.245.71:55370/bin.sh",
      "pattern": "[url:value = 'http://123.9.245.71:55370/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:21:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859470/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3495106c-596a-50ed-ad0f-218fb6a382ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.18.120.39:45482/bin.sh",
      "pattern": "[url:value = 'http://60.18.120.39:45482/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:14:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859469/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5adef4b-159a-5eea-a529-5e1486edfdd7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.61.49.31:47097/i",
      "pattern": "[url:value = 'http://115.61.49.31:47097/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:11:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859468/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48ba0fd7-a759-5aed-bd60-53330f2b3fba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.13.186.32/mipsle",
      "pattern": "[url:value = 'http://45.13.186.32/mipsle']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:08:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859466/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--841e51b8-fb30-561e-8863-133b043196a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.13.186.32/mips",
      "pattern": "[url:value = 'http://45.13.186.32/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:08:39Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859467/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee89cf12-009a-55a8-bb52-3c1284721814",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.13.186.32/x86_64",
      "pattern": "[url:value = 'http://45.13.186.32/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:08:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859465/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--336d4dd9-4af2-52a2-a23f-ea888007e28a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.13.186.32/arm",
      "pattern": "[url:value = 'http://45.13.186.32/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:08:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859463/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27fe701e-3075-5969-8f3b-ccb8faebeeec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.13.186.32/x86",
      "pattern": "[url:value = 'http://45.13.186.32/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-06T00:08:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859464/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6a112f8-b9b0-5180-bee7-8c90d8c49632",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.120.169.148:39245/bin.sh",
      "pattern": "[url:value = 'http://125.120.169.148:39245/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:55:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859462/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46c838d4-ca91-54ae-9609-3709b11cc95a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.120.169.148:39245/i",
      "pattern": "[url:value = 'http://125.120.169.148:39245/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:55:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859461/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d07c890e-da1c-50ca-a667-63f70ddb0562",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.61.49.31:47097/bin.sh",
      "pattern": "[url:value = 'http://115.61.49.31:47097/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:53:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859460/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a77e511-ab98-502d-8bba-7caf4aa37752",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.168.52.2:44741/i",
      "pattern": "[url:value = 'http://61.168.52.2:44741/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:53:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859459/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ce3cf5c-ae8d-571d-9b61-96f044d08730",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.162:59532/i",
      "pattern": "[url:value = 'http://110.36.80.162:59532/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:51:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859458/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcb367a0-64d0-5878-9ece-9e5d2d419ed0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gcwsnip.hokm.casino/110b0bd2-17df-4390-a4a6-07f3580c1ab2",
      "pattern": "[url:value = 'https://gcwsnip.hokm.casino/110b0bd2-17df-4390-a4a6-07f3580c1ab2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859457/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc3818d1-4089-53d6-9a3b-a5f3608186f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.77.89:32822/i",
      "pattern": "[url:value = 'http://182.116.77.89:32822/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859456/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4b712a4-9136-5823-9c2b-9fe80d863040",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.168.52.2:44741/bin.sh",
      "pattern": "[url:value = 'http://61.168.52.2:44741/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859455/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--306432cf-8ae0-55cf-b53f-c84d5fa7c319",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.208.105:54469/i",
      "pattern": "[url:value = 'http://219.155.208.105:54469/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:22:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859454/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6236c927-6151-5aab-929f-2465042e2a9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.193.5:49463/bin.sh",
      "pattern": "[url:value = 'http://125.44.193.5:49463/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859453/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1583f98a-1812-511b-a590-b7f52a112382",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wp0ljlux.betwana.casino/?ublib=f1dff2af-87ce-47f8-a2ec-a81f521921aa",
      "pattern": "[url:value = 'https://wp0ljlux.betwana.casino/?ublib=f1dff2af-87ce-47f8-a2ec-a81f521921aa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:16:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859452/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6d287d5-7fb1-5164-933e-04e2eee537ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.173:49601/i",
      "pattern": "[url:value = 'http://110.36.80.173:49601/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859451/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d966fac-fc25-577d-9cc8-3614e75a329b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.24.172:52506/i",
      "pattern": "[url:value = 'http://110.36.24.172:52506/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859450/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--924820e6-bda1-5d1c-8a7f-fa4753348b5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.61.14:38150/i",
      "pattern": "[url:value = 'http://182.119.61.14:38150/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:08:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859449/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96f63455-91e8-5b7a-ad1c-16c99dac4d5b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gmtzkxm.hit4bet1.com/cd940dce-bd92-40d0-9a6e-48d97dd41f8c",
      "pattern": "[url:value = 'https://gmtzkxm.hit4bet1.com/cd940dce-bd92-40d0-9a6e-48d97dd41f8c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:08:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859448/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41dd469b-a3d7-5fbf-b948-1e7957de7ea1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.208.105:54469/bin.sh",
      "pattern": "[url:value = 'http://219.155.208.105:54469/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:04:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859447/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86c4b23f-9a0c-5f47-b578-fcba2519dfea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://6go1tq9f.takbet90.bet/?ublib=0da07b4e-5156-4745-b104-f75d6f07563a",
      "pattern": "[url:value = 'https://6go1tq9f.takbet90.bet/?ublib=0da07b4e-5156-4745-b104-f75d6f07563a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859446/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6899c57-e188-5c4b-8580-5488722a22be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.146.92.46:52979/i",
      "pattern": "[url:value = 'http://117.146.92.46:52979/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859445/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b17ea89-4c25-51e9-92f1-790e2d3e11ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.40.38:42894/i",
      "pattern": "[url:value = 'http://115.52.40.38:42894/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:01:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859444/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--897e49bd-d5ae-5df8-b57a-4dc0e350c864",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.148.157.98:50298/i",
      "pattern": "[url:value = 'http://175.148.157.98:50298/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T23:00:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859443/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b89876bb-011b-5a4e-bd90-7cf02fe3a45c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lulfav.bet404farsi.com/fb0daa90-9a6b-4fe1-acf4-dec647faf674",
      "pattern": "[url:value = 'https://lulfav.bet404farsi.com/fb0daa90-9a6b-4fe1-acf4-dec647faf674']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:59:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859442/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70b8f7fe-300d-5a6f-ae8e-801d0910de78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.13.186.32/o.xml",
      "pattern": "[url:value = 'http://45.13.186.32/o.xml']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:55:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859441/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5823a83f-836b-5560-ae13-3e654a64ba8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.13.186.32/run.sh",
      "pattern": "[url:value = 'http://45.13.186.32/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:55:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859440/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9161cb2f-c1ac-5c02-ba66-b6b52614f0fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.24.172:52506/bin.sh",
      "pattern": "[url:value = 'http://110.36.24.172:52506/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:48:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859439/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b3261a3-9a22-59ff-b12b-58451a7aa521",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.162:59532/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.162:59532/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:47:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859438/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05c2a1b4-a3c1-5caa-9da4-92bd30819a0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vctiae.bet360pro.bet/67219fcb-e0cd-4d95-bb43-0fe0f18be4a6",
      "pattern": "[url:value = 'https://vctiae.bet360pro.bet/67219fcb-e0cd-4d95-bb43-0fe0f18be4a6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:46:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859437/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1dcba96-e4ab-5c3e-81c6-727e8fba0c7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.253.64:37450/i",
      "pattern": "[url:value = 'http://112.248.253.64:37450/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:43:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859436/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cd26499-4ace-5a7d-8d15-10281b05a942",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.40.38:42894/bin.sh",
      "pattern": "[url:value = 'http://115.52.40.38:42894/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:37:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859435/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d33f3eb6-0205-5ab6-957e-0b7e7c101c89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.148.157.98:50298/bin.sh",
      "pattern": "[url:value = 'http://175.148.157.98:50298/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:35:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859434/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41ec025d-da3c-51b3-ab53-13b943b1753f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.159/tkr.exe",
      "pattern": "[url:value = 'http://62.60.226.159/tkr.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:33:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859433/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68db0872-e97b-5fe3-997e-6e2793b21248",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.242.12.73:36670/bin.sh",
      "pattern": "[url:value = 'http://112.242.12.73:36670/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:32:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859432/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4555aab9-34ce-511d-8166-0a9f27e4d39a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/5279938618/oCNUppJ.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/5279938618/oCNUppJ.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:29:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859431/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f948c0da-d2d0-53a0-b096-217903289f36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nahcjeo.hezarfencrash.bet/b38267e7-f3bb-4610-8baa-4d1f882848eb",
      "pattern": "[url:value = 'https://nahcjeo.hezarfencrash.bet/b38267e7-f3bb-4610-8baa-4d1f882848eb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:28:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859430/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed16d2fc-34e7-5036-a858-86c378d3ac39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.80.173:49601/bin.sh",
      "pattern": "[url:value = 'http://110.36.80.173:49601/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859429/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40dcb139-a2dd-59e4-b0a5-4356aa8d9143",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.53.30.127:37226/i",
      "pattern": "[url:value = 'http://115.53.30.127:37226/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:22:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859428/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5688852-6a97-5b18-91ef-ab431532442d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.146.92.46:52979/bin.sh",
      "pattern": "[url:value = 'http://117.146.92.46:52979/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859427/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71235b93-eea4-5bfb-8817-d952005e956f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.149.234:42859/i",
      "pattern": "[url:value = 'http://61.53.149.234:42859/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:21:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859426/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91c9b342-265b-5130-ab31-7f8ac02bcc99",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.57.51.13:43163/i",
      "pattern": "[url:value = 'http://117.57.51.13:43163/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:16:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859425/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b1f6c19-3e79-5a2b-85d4-09daea6b6e69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.253.64:37450/bin.sh",
      "pattern": "[url:value = 'http://112.248.253.64:37450/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:14:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859424/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af39f41d-07a1-579f-9df2-546c3585ef5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.113.57:42249/i",
      "pattern": "[url:value = 'http://182.121.113.57:42249/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859423/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c718293a-e51d-5b1e-94bf-4fbf36a0c321",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.53.30.127:37226/bin.sh",
      "pattern": "[url:value = 'http://115.53.30.127:37226/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T22:02:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859422/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18b56bf4-29f4-5c3a-b674-669a1bf74ad0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.149.234:42859/bin.sh",
      "pattern": "[url:value = 'http://61.53.149.234:42859/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:59:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859421/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca611879-3ab0-52d8-8b6c-74924b7bcde3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.247.225:56503/i",
      "pattern": "[url:value = 'http://125.44.247.225:56503/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:53:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859420/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59ffc01a-c7b2-56c9-9523-03297b181027",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://korpihy.herz-frank.com/796c3ca6-ba68-45ee-ad04-7c572c2f7232",
      "pattern": "[url:value = 'https://korpihy.herz-frank.com/796c3ca6-ba68-45ee-ad04-7c572c2f7232']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:50:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859419/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b564ab32-da3c-5e55-b4b1-1f3378df5b46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.68.249.16:48649/bin.sh",
      "pattern": "[url:value = 'http://83.68.249.16:48649/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:42:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859418/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d0083a5-2be5-5601-bfb9-3ab160a4a978",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.42.237.122:49248/i",
      "pattern": "[url:value = 'http://125.42.237.122:49248/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859417/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0790f5d1-4723-58c7-9594-e84062155f6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.247.225:56503/bin.sh",
      "pattern": "[url:value = 'http://125.44.247.225:56503/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:24:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859416/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57557e12-9060-5483-8d6f-f9b7bbee3911",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.81.185:47990/bin.sh",
      "pattern": "[url:value = 'http://39.74.81.185:47990/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:21:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859415/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b56b9404-458f-596f-ad17-f5fef19a2816",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mjdkxzn7.betvolleyball.net/?ublib=28590d40-9bea-41fc-a91d-4b183f8e1aaf",
      "pattern": "[url:value = 'https://mjdkxzn7.betvolleyball.net/?ublib=28590d40-9bea-41fc-a91d-4b183f8e1aaf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:16:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859414/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a8f6444-9562-58fc-97b9-97b46cde7d3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.239.147:51932/i",
      "pattern": "[url:value = 'http://115.48.239.147:51932/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:15:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859413/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e605e6c1-03ae-5e4e-91b5-e67565bda5c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.103.116.68:50721/i",
      "pattern": "[url:value = 'http://59.103.116.68:50721/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:14:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859412/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5958cddd-aafa-526b-b412-7d9798679d94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tbbhdjx.golfbetpro.com/f613253d-4dd5-4f4b-b951-015a597657f6",
      "pattern": "[url:value = 'https://tbbhdjx.golfbetpro.com/f613253d-4dd5-4f4b-b951-015a597657f6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859411/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a38be33-3be1-5ba4-9f31-b28283507b89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.47.209:55747/i",
      "pattern": "[url:value = 'http://115.56.47.209:55747/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:10:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859410/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c91bef43-2859-56eb-a697-d4faa785516f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.217.137:60862/i",
      "pattern": "[url:value = 'http://123.14.217.137:60862/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T21:08:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859409/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01829b91-18d6-5136-a061-8a589cb50fc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.103.116.68:50721/bin.sh",
      "pattern": "[url:value = 'http://59.103.116.68:50721/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859408/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e878233b-8fb7-5ecd-84f0-6c86ee68209d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nmnntl.bet303casino.com/61db9285-dc37-4b9b-89d4-21ce3333ced6",
      "pattern": "[url:value = 'https://nmnntl.bet303casino.com/61db9285-dc37-4b9b-89d4-21ce3333ced6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:45:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859407/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94ea7b6f-1e6a-50dc-829f-e2f659f80f82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.217.137:60862/bin.sh",
      "pattern": "[url:value = 'http://123.14.217.137:60862/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:40:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859406/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0492206-af08-57de-97f1-14fda7c874df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zdxibl.bet212.casino/aa2fd131-abd0-412f-a029-0c211eab787c",
      "pattern": "[url:value = 'https://zdxibl.bet212.casino/aa2fd131-abd0-412f-a029-0c211eab787c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:35:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859405/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c775e48d-d304-5c23-9253-5f3fa147343f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://duizlfe.funbet24.bet/38956f45-9a35-4da2-b7eb-690d0161f76d",
      "pattern": "[url:value = 'https://duizlfe.funbet24.bet/38956f45-9a35-4da2-b7eb-690d0161f76d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:34:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859404/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e76424f-5654-55d9-a177-e8569613a31e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.165.79.195:39992/i",
      "pattern": "[url:value = 'http://175.165.79.195:39992/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:33:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859403/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d67c383-998a-5342-b45a-e6f3b8179648",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ldgssv.bazipoop.com/15a91cc8-e3b8-4763-808c-2fc17678b281",
      "pattern": "[url:value = 'https://ldgssv.bazipoop.com/15a91cc8-e3b8-4763-808c-2fc17678b281']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:30:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859402/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e781641e-5d85-5eac-a63a-414f31118d52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.47.209:55747/bin.sh",
      "pattern": "[url:value = 'http://115.56.47.209:55747/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:25:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859401/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd9e1090-6ee1-557f-97cb-054a9b38bac3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.14.156:47863/i",
      "pattern": "[url:value = 'http://110.37.14.156:47863/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859400/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a43cd4b-3f82-5dae-aa43-5fd8daaf1597",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://201.149.107.50:50872/i",
      "pattern": "[url:value = 'http://201.149.107.50:50872/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:17:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859399/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--515e4adc-5763-518a-a5ed-ad70036119f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.165.79.195:39992/bin.sh",
      "pattern": "[url:value = 'http://175.165.79.195:39992/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:13:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859398/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30dadc00-3a0a-53ec-b734-aed79382e68c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.50.2:48557/i",
      "pattern": "[url:value = 'http://42.232.50.2:48557/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:10:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859397/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5155ea2-853f-5942-a2bd-1cb1c5dbdca8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.14.156:47863/bin.sh",
      "pattern": "[url:value = 'http://110.37.14.156:47863/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T20:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859396/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c8710dd-f9ac-59bd-8a7f-d66c70dfdd78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bwqzszo.football2026.world/4c9e067f-64b0-4d9c-9048-c1f9893acace",
      "pattern": "[url:value = 'https://bwqzszo.football2026.world/4c9e067f-64b0-4d9c-9048-c1f9893acace']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:54:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859395/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--623fbd7b-7ddf-588b-8ad3-e0fb7821e355",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.232.91.126:51179/i",
      "pattern": "[url:value = 'http://113.232.91.126:51179/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:52:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859394/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61305c76-a30b-548c-810c-375a13a386f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wntgjbu.footbalbet.com/ff30e4ad-6451-480d-8bb2-bbf44c763d62",
      "pattern": "[url:value = 'https://wntgjbu.footbalbet.com/ff30e4ad-6451-480d-8bb2-bbf44c763d62']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859393/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c8d58ba-9074-54eb-bcec-80845c82c32e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.50.2:48557/bin.sh",
      "pattern": "[url:value = 'http://42.232.50.2:48557/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:41:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859392/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb400b90-12dd-5cc6-930d-fff62d50542b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.166.194:34505/bin.sh",
      "pattern": "[url:value = 'http://182.119.166.194:34505/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:41:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859391/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62e7cf67-4e10-5d90-9447-172b767299f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.97.32:49972/i",
      "pattern": "[url:value = 'http://110.37.97.32:49972/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:38:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859390/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0e4cdb1-775b-5ceb-8b15-de07514b1e92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.204.197.147:39822/bin.sh",
      "pattern": "[url:value = 'http://27.204.197.147:39822/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:34:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859389/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd772948-356d-5967-accb-8596cf8723a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://201.149.107.50:50872/bin.sh",
      "pattern": "[url:value = 'http://201.149.107.50:50872/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859388/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eb3ea8b-ed78-58f3-ae39-2a9a9ee236e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.79.133.212:32822/i",
      "pattern": "[url:value = 'http://39.79.133.212:32822/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:18:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859387/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f553ea53-e7f6-5bf5-9da6-252b6ca986f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.51.79:50704/bin.sh",
      "pattern": "[url:value = 'http://27.215.51.79:50704/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:16:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859386/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03d3850f-8cb0-5c49-8325-81d225f81072",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zttxgpqq.jacksorbetter.casino/?ublib=b11adec1-89ce-4f52-8988-16303d511c55",
      "pattern": "[url:value = 'https://zttxgpqq.jacksorbetter.casino/?ublib=b11adec1-89ce-4f52-8988-16303d511c55']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:15:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859385/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--990f0a26-de5f-544f-ada3-9685f53f2379",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.226.207:49670/i",
      "pattern": "[url:value = 'http://110.39.226.207:49670/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:14:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859384/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a08b8c87-5eff-5521-ba08-ad58b46b8cf1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.51.79:50704/i",
      "pattern": "[url:value = 'http://27.215.51.79:50704/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:13:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859383/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4a7d08d-5fe4-50e0-9b72-66399d1ac104",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.97.32:49972/bin.sh",
      "pattern": "[url:value = 'http://110.37.97.32:49972/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:12:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859382/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fb90aec-6f7e-57e1-a30f-9069b1d97105",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qavsqox.footbal90bet.app/521d3e20-1cc5-48b5-b5aa-9a22e8671766",
      "pattern": "[url:value = 'https://qavsqox.footbal90bet.app/521d3e20-1cc5-48b5-b5aa-9a22e8671766']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859381/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af96775e-6e52-58b4-b9a0-00839a092a03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.56.142.229:46645/bin.sh",
      "pattern": "[url:value = 'http://42.56.142.229:46645/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T19:11:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859380/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ec5f521-611a-5d01-aafd-1b1dcf77b7e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.79.133.212:32822/bin.sh",
      "pattern": "[url:value = 'http://39.79.133.212:32822/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:48:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859379/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cc6df09-6a4e-560e-8f66-29b0c9691773",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.226.207:49670/bin.sh",
      "pattern": "[url:value = 'http://110.39.226.207:49670/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:46:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859378/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3aa88b0-58e1-52d1-9d72-178b0d90f2ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://121.202.142.137:46266/bin.sh",
      "pattern": "[url:value = 'http://121.202.142.137:46266/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:45:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859377/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc966926-128d-59ea-9d8d-ef9f9e86670f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.206.120:46155/i",
      "pattern": "[url:value = 'http://123.9.206.120:46155/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:40:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859376/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ab305e0-8381-5eb2-beea-57e758055715",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.231.61:54150/i",
      "pattern": "[url:value = 'http://110.39.231.61:54150/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:38:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859375/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3280a5e-f9c2-59f9-a154-6c27e8225037",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.214.59:56605/i",
      "pattern": "[url:value = 'http://123.188.214.59:56605/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859374/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75c5486a-6a83-5249-bd93-2c1e5a778b2f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://udqmerf.fibi-ireland.com/5fac70ea-bcb4-4c87-bb05-1c8b33828bd0",
      "pattern": "[url:value = 'https://udqmerf.fibi-ireland.com/5fac70ea-bcb4-4c87-bb05-1c8b33828bd0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859372/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47612af4-165e-5990-b995-445a124b9746",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wisvfr.basketballiran.com/36a950f4-34eb-4a26-9cb0-faac5b70c1c7",
      "pattern": "[url:value = 'https://wisvfr.basketballiran.com/36a950f4-34eb-4a26-9cb0-faac5b70c1c7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:29:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859373/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23f67422-ed91-56c9-a3e0-e6662a85d245",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.214.59:56605/bin.sh",
      "pattern": "[url:value = 'http://123.188.214.59:56605/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:27:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859371/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38bf5c0d-3cab-56e6-a8b7-ded558aae8f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.254.246:60360/i",
      "pattern": "[url:value = 'http://119.179.254.246:60360/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:27:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859370/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acd56fe0-df12-5229-9ddf-6a1399edebe8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.124.ptr.pfcloud.network/hiddenbin/mips",
      "pattern": "[url:value = 'http://176.65.149.124.ptr.pfcloud.network/hiddenbin/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:22:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859369/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c61bde13-4fa9-5c87-b87e-1e5594ef4578",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.124/ohshit.sh",
      "pattern": "[url:value = 'http://176.65.149.124/ohshit.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:22:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859367/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4612c673-c340-555f-9cff-5c24f34c5075",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.149.124/hiddenbin/mips",
      "pattern": "[url:value = 'http://176.65.149.124/hiddenbin/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:22:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859368/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc2207af-4484-5f04-a1e3-50c1847c171e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.162.189:49301/i",
      "pattern": "[url:value = 'http://222.134.162.189:49301/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:21:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859366/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c5b605-af90-5b2f-a1fb-8e64e76641bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wrersk.ar888starz.bet/2eccae7c-f65b-41b4-8aab-660244b861a6",
      "pattern": "[url:value = 'https://wrersk.ar888starz.bet/2eccae7c-f65b-41b4-8aab-660244b861a6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:18:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859365/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71b112e4-ba1c-5577-94f0-c120cf664bde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.231.61:54150/bin.sh",
      "pattern": "[url:value = 'http://110.39.231.61:54150/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:13:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859363/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb8cf6db-7365-5310-8354-f023b39a8ad1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.254.246:60360/bin.sh",
      "pattern": "[url:value = 'http://119.179.254.246:60360/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:13:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859364/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb52affc-fbe1-537c-ab04-69d756908a02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://onoizuz.fibi-ireland.com/2d27cc39-bb86-49c0-aae4-5e7f1ea773b6",
      "pattern": "[url:value = 'https://onoizuz.fibi-ireland.com/2d27cc39-bb86-49c0-aae4-5e7f1ea773b6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859362/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b01c150-80a1-5f77-a1af-7111754fcb3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.162.189:49301/bin.sh",
      "pattern": "[url:value = 'http://222.134.162.189:49301/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:05:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859361/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2cba4b6-197a-53a4-9150-950620e8bd1c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://o2w2806g.tagat120art.com/?ublib=3528a521-7848-4782-b20b-abbc68e1a540",
      "pattern": "[url:value = 'https://o2w2806g.tagat120art.com/?ublib=3528a521-7848-4782-b20b-abbc68e1a540']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T18:03:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859360/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2097a49a-19f2-5e2a-8b85-07974fdc2459",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.124.77.13:55832/i",
      "pattern": "[url:value = 'http://182.124.77.13:55832/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:57:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859359/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e1a9a2d-6fd1-5fa7-bd6a-5499e0a3dbd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.2.23:43593/i",
      "pattern": "[url:value = 'http://110.36.2.23:43593/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:46:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859358/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1c28561-f92f-5c6f-9165-96f5a44131aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.125.75:57845/i",
      "pattern": "[url:value = 'http://123.5.125.75:57845/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:43:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859357/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04caea20-4f76-5f6b-b3d9-fcc11655ddb7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ytmjwql.eurothrombosis2018.com/1d490039-c7a8-4ef2-9134-1d77000bbbad",
      "pattern": "[url:value = 'https://ytmjwql.eurothrombosis2018.com/1d490039-c7a8-4ef2-9134-1d77000bbbad']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:29:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859356/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6176b5f7-70f1-5b83-bd5c-2ce95a5b6fc0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.123.184:34550/i",
      "pattern": "[url:value = 'http://182.126.123.184:34550/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:25:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859355/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98724aec-a82c-5d00-a4c2-841cf4ec914a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.1.246.99:56735/bin.sh",
      "pattern": "[url:value = 'http://221.1.246.99:56735/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:24:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859354/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e05cc555-3dc9-5c2c-bfcf-b7dc79265d52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.2.23:43593/bin.sh",
      "pattern": "[url:value = 'http://110.36.2.23:43593/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859353/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b01990be-4b18-5c9d-8f7e-b73a07d05738",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.246.153:46455/bin.sh",
      "pattern": "[url:value = 'http://123.9.246.153:46455/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:20:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859352/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a52a3e97-7b9b-5ece-b345-c1d291112578",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://1v55nk51.irantennis.bet/?ublib=8216055e-3934-4fb2-98d9-c356af95e15b",
      "pattern": "[url:value = 'https://1v55nk51.irantennis.bet/?ublib=8216055e-3934-4fb2-98d9-c356af95e15b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:14:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859351/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19a313d4-2028-5e81-b339-86900d51dcb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.86.141:43603/i",
      "pattern": "[url:value = 'http://163.142.86.141:43603/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:09:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859350/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24355674-adeb-5848-a037-b5648d702b82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.218.77:43915/i",
      "pattern": "[url:value = 'http://182.127.218.77:43915/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:03:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859349/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63905bc4-cdee-599c-83cd-986be20c2734",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.123.184:34550/bin.sh",
      "pattern": "[url:value = 'http://182.126.123.184:34550/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859348/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d961bed-8422-5810-aef5-3ce5f65daba5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/Psd8eZaW/Plugins/cred64.dll",
      "pattern": "[url:value = 'http://196.251.107.104/Psd8eZaW/Plugins/cred64.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:01:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859346/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74123c6a-733e-5178-919f-bc81b4e1e0d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/clp2.exe",
      "pattern": "[url:value = 'http://196.251.107.104/clp2.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:01:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859347/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a92523c-f9a8-5212-8661-4d9a72a2ab58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/Psd8eZaW/Plugins/cred.dll",
      "pattern": "[url:value = 'http://196.251.107.104/Psd8eZaW/Plugins/cred.dll']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859344/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71b4fdf9-f689-50c3-9c2f-af7b5ae4abba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/clp1.exe",
      "pattern": "[url:value = 'http://196.251.107.104/clp1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:01:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859345/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e8261e9-cc62-5e1b-828f-3c6746ececfb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.251.107.104/amadey_x64.zip",
      "pattern": "[url:value = 'http://196.251.107.104/amadey_x64.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T17:01:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859343/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e02b130-dc19-587f-947b-033dfb5bd184",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.37.87:41863/i",
      "pattern": "[url:value = 'http://222.141.37.87:41863/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859342/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26752f9a-3a13-5e67-aff2-0913620e59f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xcaejii.enobahis.co/478d16c3-630d-4879-bdb2-1e5196e209e2",
      "pattern": "[url:value = 'https://xcaejii.enobahis.co/478d16c3-630d-4879-bdb2-1e5196e209e2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:51:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859341/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3178b2b6-3a94-56aa-b797-b5c1e31eb012",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.251.167:56537/i",
      "pattern": "[url:value = 'http://182.121.251.167:56537/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:49:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859340/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b202f4d9-7691-532b-a8bd-f2e2e98a1f43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.48.225:56035/i",
      "pattern": "[url:value = 'http://42.235.48.225:56035/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:40:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859339/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ede70e11-da5c-5a70-9098-799ec1c0ae42",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.37.87:41863/bin.sh",
      "pattern": "[url:value = 'http://222.141.37.87:41863/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859338/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d67af86f-f390-53ef-842e-ef07c6bd568e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.37.227.254:60470/i",
      "pattern": "[url:value = 'http://27.37.227.254:60470/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:33:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859337/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc0d7ea8-78d2-5e19-b9cb-c921400c02a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.218.77:43915/bin.sh",
      "pattern": "[url:value = 'http://182.127.218.77:43915/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:28:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859336/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79afbf24-25d7-578e-97ca-7d0d8cefa970",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.4.22:52125/i",
      "pattern": "[url:value = 'http://221.15.4.22:52125/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:27:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859335/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36465f98-85dd-5ed9-b59a-d43142d596bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.4.22:52125/bin.sh",
      "pattern": "[url:value = 'http://221.15.4.22:52125/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:24:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859334/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e9bfa99-427e-53d1-92a5-5aa3045cc5d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.129.133.197:36697/i",
      "pattern": "[url:value = 'http://123.129.133.197:36697/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:22:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859333/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31c23a72-5264-5348-9c1f-6a8b003ac0ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mmhaqx.sigari.bet/194b3080-5502-4716-b439-ce9ecc751afa",
      "pattern": "[url:value = 'https://mmhaqx.sigari.bet/194b3080-5502-4716-b439-ce9ecc751afa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859332/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9172627-4003-5927-baab-6e6f37be3726",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.48.225:56035/bin.sh",
      "pattern": "[url:value = 'http://42.235.48.225:56035/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:18:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859331/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cd51f8b-556a-58f6-9827-d9400260420c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.31.141:54460/i",
      "pattern": "[url:value = 'http://42.231.31.141:54460/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:12:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859330/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2044764-2c66-5d1c-b8f7-06e0bbf4555e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://trlclzb.enfejar.game/b2be3260-d419-4c63-84f1-88d87c1bded9",
      "pattern": "[url:value = 'https://trlclzb.enfejar.game/b2be3260-d419-4c63-84f1-88d87c1bded9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T16:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859329/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ceef311c-f8ae-5644-95c0-ac8f4d701a76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.24.175:37987/bin.sh",
      "pattern": "[url:value = 'http://42.224.24.175:37987/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:57:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859328/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d96bc07-8369-56eb-9f0d-b7ca95dfbf17",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.239.147:51932/bin.sh",
      "pattern": "[url:value = 'http://115.48.239.147:51932/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859327/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a956a24e-7366-5875-afcb-881e16182e7a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.129.133.197:36697/bin.sh",
      "pattern": "[url:value = 'http://123.129.133.197:36697/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:53:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859326/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39b4cfc4-5d38-50e8-8ea5-7160fe11a3cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.133.67:47180/i",
      "pattern": "[url:value = 'http://115.48.133.67:47180/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:51:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859325/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--190a2514-978a-5d9a-8a5e-7caa14b7c29b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.224.24.175:37987/i",
      "pattern": "[url:value = 'http://42.224.24.175:37987/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859324/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b03cb337-b4fd-5762-a7f7-cf252fc1c7a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dqgfigs.enfejarbazii.bet/65ec78ee-1e37-4521-a55d-ee063b52e8e3",
      "pattern": "[url:value = 'https://dqgfigs.enfejarbazii.bet/65ec78ee-1e37-4521-a55d-ee063b52e8e3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:33:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859323/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9540125-f59c-57a7-8f1d-f299e3d8293c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.0:42361/i",
      "pattern": "[url:value = 'http://110.36.86.0:42361/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:15:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859322/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58c01be9-00c3-5e3c-afb0-4a4c0fa0cb76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://1djqvowq.iaap2019.com/?ublib=9553a464-8210-4f70-9353-94a2bc2ed155",
      "pattern": "[url:value = 'https://1djqvowq.iaap2019.com/?ublib=9553a464-8210-4f70-9353-94a2bc2ed155']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:15:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859321/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc986758-1d96-5d22-bcd4-945ac703b561",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://218.91.33.157:33594/bin.sh",
      "pattern": "[url:value = 'http://218.91.33.157:33594/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T15:10:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859320/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--419d9950-de23-5c20-864a-499e15d6647c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.196.208.209:46989/i",
      "pattern": "[url:value = 'http://115.196.208.209:46989/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:58:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859319/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95049adb-8be6-5455-8afc-383295e5dd5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bdbxwze.electriccrash.bet/7667f86a-1a5c-4028-a7fc-ca6f4ba51616",
      "pattern": "[url:value = 'https://bdbxwze.electriccrash.bet/7667f86a-1a5c-4028-a7fc-ca6f4ba51616']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:55:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859318/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2b7e8b1-6abb-53ab-b274-fdccf1072757",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ghuctqf.ef90bet.com/6a394140-a786-43cf-95da-013caf432300",
      "pattern": "[url:value = 'https://ghuctqf.ef90bet.com/6a394140-a786-43cf-95da-013caf432300']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:48:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859317/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1c5fedd-5397-5156-8501-23eb0cae0207",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.0:42361/bin.sh",
      "pattern": "[url:value = 'http://110.36.86.0:42361/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:47:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859315/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7167f278-d54f-561f-a5b2-670c028a5a25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.228.250:56772/i",
      "pattern": "[url:value = 'http://123.12.228.250:56772/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:47:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859316/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--835bb671-2845-5573-ad0d-5ce2c9cda671",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.196.208.209:46989/bin.sh",
      "pattern": "[url:value = 'http://115.196.208.209:46989/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:26:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859314/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d3babcc-5f2f-5667-85a3-8abf98317a90",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://117.211.44.140:54313/Mozi.m",
      "pattern": "[url:value = 'http://117.211.44.140:54313/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:25:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859313/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2ebe31d-8f0b-521f-87fa-8cfcb4322200",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.228.250:56772/bin.sh",
      "pattern": "[url:value = 'http://123.12.228.250:56772/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859312/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d60e0ed-d7a1-5bb0-a6e3-65fbd507fb4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://huyndo.shirbetfarsi.com/256fff3c-3044-4efd-9865-e48c395b332b",
      "pattern": "[url:value = 'https://huyndo.shirbetfarsi.com/256fff3c-3044-4efd-9865-e48c395b332b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:21:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859311/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d85c112d-f7b1-56da-bebb-3deaa312224d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.246.24:50196/i",
      "pattern": "[url:value = 'http://115.52.246.24:50196/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:20:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859310/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7771926e-0d28-5bd0-8a80-ca063cbfd904",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://193.93.228.160:55488/i",
      "pattern": "[url:value = 'http://193.93.228.160:55488/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:19:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859309/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8825ac03-e2b6-52f9-ac48-9a8111184d8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.57.219.22:45414/i",
      "pattern": "[url:value = 'http://42.57.219.22:45414/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:18:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859308/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e47a1055-08fe-5eaa-aa7d-5530f1abe665",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zzvfyei.dahdahtoys.com/bc86b4a2-8250-41f5-982d-cb8892b8bdbf",
      "pattern": "[url:value = 'https://zzvfyei.dahdahtoys.com/bc86b4a2-8250-41f5-982d-cb8892b8bdbf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T14:09:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859307/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cacdc63d-2e65-5069-86d0-d89c0a07713a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.246.24:50196/bin.sh",
      "pattern": "[url:value = 'http://115.52.246.24:50196/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:58:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859306/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b76ec01-a21a-5f04-a758-2bb51a130a4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.173.122:58451/i",
      "pattern": "[url:value = 'http://115.58.173.122:58451/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:57:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859305/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2b5026b-54eb-59fe-8db2-e4e2fbe4d4db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://193.93.228.160:55488/bin.sh",
      "pattern": "[url:value = 'http://193.93.228.160:55488/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:56:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859304/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d411f16-1719-588d-936e-02910226c335",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://usetlnl.volleyball.vip/05507d4a-990e-4efc-bed7-e74742e3f5aa",
      "pattern": "[url:value = 'https://usetlnl.volleyball.vip/05507d4a-990e-4efc-bed7-e74742e3f5aa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:55:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859303/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--831d9bb3-7856-5fc1-8aa5-1d1a8964efd0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.193.5:49463/i",
      "pattern": "[url:value = 'http://125.44.193.5:49463/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:54:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859302/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce08ad92-53af-5293-b6fd-0f40c055e8ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/spc",
      "pattern": "[url:value = 'http://31.56.209.220/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:51:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859301/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34af3aa0-9b1c-50a0-a1d1-2eb01dc7d0ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/dlink",
      "pattern": "[url:value = 'http://31.56.209.220/dlink']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859297/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48262c09-ffe4-56ea-b845-2daa507d695d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/i686",
      "pattern": "[url:value = 'http://31.56.209.220/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859298/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84a549d3-6e94-5207-a752-a2e12f7deff3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/k",
      "pattern": "[url:value = 'http://31.56.209.220/k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859299/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8608ca54-af1f-558f-91e5-770c2a9e5977",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/m68k",
      "pattern": "[url:value = 'http://31.56.209.220/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859300/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38b81803-8347-5ac4-b9ee-694b0b13344b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/ppc",
      "pattern": "[url:value = 'http://31.56.209.220/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859296/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--149dc030-9daf-58cc-b7d5-86c36925f65f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/sh4",
      "pattern": "[url:value = 'http://31.56.209.220/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859295/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c1f4584-2599-5d37-b553-1fc9426c824b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/arm6",
      "pattern": "[url:value = 'http://31.56.209.220/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859293/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9270cb3-848d-506b-8b65-b678ee9e65e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/massload",
      "pattern": "[url:value = 'http://31.56.209.220/massload']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:50:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859294/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adc1a6bb-5b1f-5eab-8cc4-24c4c08b5de8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://31.56.209.220/arm4",
      "pattern": "[url:value = 'http://31.56.209.220/arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:49:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859292/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2a4a921-b508-5899-b54d-9daf4850eacd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mnejbrs.volleyball.vin/5a18ba29-7d29-49f4-91a8-9c115b832354",
      "pattern": "[url:value = 'https://mnejbrs.volleyball.vin/5a18ba29-7d29-49f4-91a8-9c115b832354']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:45:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859291/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d88d1ec-6877-51be-868a-8d3390e560c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.88.186.70/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'http://45.88.186.70/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:44:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859290/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--843bc801-eccc-5a4a-9a65-3fa7a7c6e8fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://194.26.192.187/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://194.26.192.187/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:44:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859289/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d50899f-9b0c-571b-8267-b4b44dfa00b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://193.26.115.238/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://193.26.115.238/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:44:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859288/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--989aab75-8b88-5f9a-bd1e-97fb39e7b56c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://203.159.90.37/bin/support.client.exe",
      "pattern": "[url:value = 'https://203.159.90.37/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859285/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd6a481e-eabe-5c33-858d-c6d7649357dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://203.159.90.37/Bin/ScreenConnect.ClientSetup.exe",
      "pattern": "[url:value = 'https://203.159.90.37/Bin/ScreenConnect.ClientSetup.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859286/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b321a27-dc3d-5c6f-b611-91a161981a35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://194.26.192.187/bin/support.client.exe",
      "pattern": "[url:value = 'https://194.26.192.187/bin/support.client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859287/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03795f92-ed68-5c2f-9711-e3a92b954c97",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.237.210:38500/i",
      "pattern": "[url:value = 'http://123.4.237.210:38500/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859284/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0656dfe-96dd-5200-a660-f46c6c205c9b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/qNU",
      "pattern": "[url:value = 'http://188.132.232.81/qNU']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859283/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52496467-0a13-5ab3-b101-072589e30289",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/2r0",
      "pattern": "[url:value = 'http://188.132.232.81/2r0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bcbed70-a470-5528-86a8-2f4b9a523de9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/x-8.6-.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/x-8.6-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859275/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--941eb17f-d5cf-5024-a7a7-c6f973ddda19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/a-r.m-6.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/a-r.m-6.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859276/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72c1cd7c-3673-537d-8359-f02c8e4de846",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/m-p.s-l.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/m-p.s-l.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859277/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d9dbc16-6f5d-538c-b137-0239475d6f36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/i-5.8-6.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/i-5.8-6.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859278/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39c77b63-7f0b-50fb-bc9c-4359b4f7b24b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/9eB",
      "pattern": "[url:value = 'http://188.132.232.81/9eB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859279/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14607dc8-4cba-5f60-9f51-398acaaf66d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/9hF",
      "pattern": "[url:value = 'http://188.132.232.81/9hF']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859280/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f30d4fed-f006-5fbd-b40a-5fab8883716f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/a-r.m-7.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/a-r.m-7.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859281/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b1dc868-43d9-5da5-b6c6-328ba2505efa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/m-i.p-s.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/m-i.p-s.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859282/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--649a37a7-a326-5d4a-aa87-02353c3e8575",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/LVUD",
      "pattern": "[url:value = 'http://188.132.232.81/LVUD']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea157398-d298-5b92-9cac-14561137dfd8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/oHK7",
      "pattern": "[url:value = 'http://188.132.232.81/oHK7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff1291b3-9927-5898-bc88-52a7a6be3906",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/a-r.m-4.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/a-r.m-4.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--923271de-bec4-5e37-b72c-e17f6811e268",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/s-h.4-.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/s-h.4-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7100eb3-ef19-5564-90e7-93d5e298a1b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/x-3.2-.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/x-3.2-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3506edb6-bfff-5ed7-a970-b25db320b048",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/a-r.m-5.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/a-r.m-5.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5009d546-033c-53fa-85a7-bc8e9ac3c3c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Bqj",
      "pattern": "[url:value = 'http://188.132.232.81/Bqj']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--104c1e58-fa42-5255-b78f-9144cc80aa56",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/jjA",
      "pattern": "[url:value = 'http://188.132.232.81/jjA']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c01359-cef1-58a9-91da-40b7e93e3096",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/RRSb",
      "pattern": "[url:value = 'http://188.132.232.81/RRSb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--064fa628-6cdd-526e-815b-b1ea05abc346",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/hks",
      "pattern": "[url:value = 'http://188.132.232.81/hks']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de3fec01-67cf-5e20-bca5-3d6c015ee4cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/VWgm",
      "pattern": "[url:value = 'http://188.132.232.81/VWgm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8754ef99-83a9-59b1-a31e-b8941b063aaa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/m-6.8-k.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/m-6.8-k.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2717a32-91a9-5bd7-a19c-2214675d3239",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/8Px",
      "pattern": "[url:value = 'http://188.132.232.81/8Px']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82cf62df-4db0-50ff-9ca4-7cc6bb267bc7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/gXk",
      "pattern": "[url:value = 'http://188.132.232.81/gXk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81932dbf-3271-5abf-8afd-2172a18ea253",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/4qGx",
      "pattern": "[url:value = 'http://188.132.232.81/4qGx']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8eb1aa8e-d530-54fd-8f4f-c31e30b03208",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/p-p.c-.Sakura",
      "pattern": "[url:value = 'http://176.65.139.151/p-p.c-.Sakura']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da71c0fd-22ae-51bc-a1b7-6c4393518c1c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/dPO",
      "pattern": "[url:value = 'http://188.132.232.81/dPO']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69913d0b-7b4d-5834-b130-592521ab7598",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.6.84.128:50383/i",
      "pattern": "[url:value = 'http://42.6.84.128:50383/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:15:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--320611ef-9af4-59e8-8a0b-d1d80f21c033",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pacsuhw1.pishbini90.bet/?ublib=a69fc497-1a12-4680-b01c-df31d3068610",
      "pattern": "[url:value = 'https://pacsuhw1.pishbini90.bet/?ublib=a69fc497-1a12-4680-b01c-df31d3068610']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:15:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c78de31e-bf60-56e5-aa32-97cd72107d95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.229.216:53676/i",
      "pattern": "[url:value = 'http://123.12.229.216:53676/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:14:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56ed962b-cef4-581e-8e9e-9bddd11882af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://concilicartoes.com.br/wp-admin/css/colors/modem/Omada.exe",
      "pattern": "[url:value = 'https://concilicartoes.com.br/wp-admin/css/colors/modem/Omada.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b9ba318-5d4a-54c1-95bf-edacef930871",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ptrpzfj.volleyball.poker/487070b1-5a5d-40ba-aec8-6a1b1557a940",
      "pattern": "[url:value = 'https://ptrpzfj.volleyball.poker/487070b1-5a5d-40ba-aec8-6a1b1557a940']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63b2dbad-5c4c-5ef0-8956-767da656b3f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://iwd21.icu/mim/jASkkFf.txt",
      "pattern": "[url:value = 'https://iwd21.icu/mim/jASkkFf.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:09:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d467ea6d-a090-5d8e-beb6-84cbd36754e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ritubohara.com/stego_pyloa.png",
      "pattern": "[url:value = 'https://ritubohara.com/stego_pyloa.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:07:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c882985-c8eb-5732-9d8c-75d50fc547b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://corwineagles.com/stegopay.png",
      "pattern": "[url:value = 'https://corwineagles.com/stegopay.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:07:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07e7d24c-7ad0-5d9c-8ecd-f890c28b47af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.22.196.199:55242/i",
      "pattern": "[url:value = 'http://60.22.196.199:55242/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:06:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bc4b128-7e50-52cd-9577-5c4b6ea3d030",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.237.210:38500/bin.sh",
      "pattern": "[url:value = 'http://123.4.237.210:38500/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:06:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31604ff4-fb38-5b98-a602-78439db78259",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://corwineagles.com/payloads.png",
      "pattern": "[url:value = 'https://corwineagles.com/payloads.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e725a841-12bc-5c40-ac24-da2469acd359",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/arm7",
      "pattern": "[url:value = 'http://5.83.134.26/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:05:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b423c191-70ec-5c81-91e5-cd983e6e3fd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-9682d5896df841679c5a17eb41273f89.r2.dev/setup.msi",
      "pattern": "[url:value = 'https://pub-9682d5896df841679c5a17eb41273f89.r2.dev/setup.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9307bfd4-0689-5487-86be-86ac37fc3736",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/telnet.sh",
      "pattern": "[url:value = 'http://smart.abuse.st/telnet.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b3cb386-d47a-5b5e-be2f-a586951b6ded",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.232.247/ARMV7L",
      "pattern": "[url:value = 'http://94.183.232.247/ARMV7L']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e95e7251-1e17-516c-83fb-9b52ea975ec9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/spc",
      "pattern": "[url:value = 'http://5.83.134.26/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df0e6d20-1962-50f6-b8a5-9ebb2f34d71f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/m68k",
      "pattern": "[url:value = 'http://5.83.134.26/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f7fbc1e-a5ec-58bd-9e17-54a7ca347525",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/ppc",
      "pattern": "[url:value = 'http://5.83.134.26/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b068500b-013d-5693-88f1-324b27542b45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/arm",
      "pattern": "[url:value = 'http://5.83.134.26/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f3e7c49-922a-5078-b9f4-7e86617d36fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/x86_64",
      "pattern": "[url:value = 'http://5.83.134.26/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b139348-cf9b-5f06-8af1-2b6495b35e91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/x86",
      "pattern": "[url:value = 'http://5.83.134.26/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36514963-b8f4-58dd-ae3d-db3a67ab2557",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/arm6",
      "pattern": "[url:value = 'http://5.83.134.26/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fba919ef-7a4e-5e3c-a627-b600484e67e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/arc",
      "pattern": "[url:value = 'http://5.83.134.26/arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46054395-e64e-578a-8583-7e7de762583c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/sh4",
      "pattern": "[url:value = 'http://5.83.134.26/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--194114bc-b912-552f-bff1-966b13f8fd86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/tplink",
      "pattern": "[url:value = 'http://smart.abuse.st/tplink']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11abbf35-50a5-593a-a0ca-16abf1635b59",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/x86",
      "pattern": "[url:value = 'http://smart.abuse.st/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb323309-5114-53d9-87ad-51c2d24383ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/curl.sh",
      "pattern": "[url:value = 'http://5.83.134.26/curl.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25ad7cbe-bb38-562e-a89e-0cd8b82ab0b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/wget.sh",
      "pattern": "[url:value = 'http://5.83.134.26/wget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2aec33c-cf27-5c47-8b18-aa8806b71026",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://owps0tha.staffbulldesign.com/?ublib=65784c7b-45e5-4382-a648-abf5b5134e2f",
      "pattern": "[url:value = 'https://owps0tha.staffbulldesign.com/?ublib=65784c7b-45e5-4382-a648-abf5b5134e2f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T13:03:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85deb048-8993-50d5-8bf1-0de3055f3ced",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.22.196.199:55242/bin.sh",
      "pattern": "[url:value = 'http://60.22.196.199:55242/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:53:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--feaceb6e-b9f5-5947-b016-6581ad443017",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.58.169:60524/i",
      "pattern": "[url:value = 'http://123.188.58.169:60524/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:49:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dd0063e-dff1-5519-bbb0-f4d76be11efc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.229.216:53676/bin.sh",
      "pattern": "[url:value = 'http://123.12.229.216:53676/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:48:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74752e78-8acd-516c-bc6a-c8653f171595",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.232.97:44344/bin.sh",
      "pattern": "[url:value = 'http://115.55.232.97:44344/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:47:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d815197-e885-5172-924c-b2945f641fb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.189.155.23:38727/i",
      "pattern": "[url:value = 'http://123.189.155.23:38727/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:47:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a76c2d71-6f2b-51e5-9472-323a7320bd7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.61.14:38150/bin.sh",
      "pattern": "[url:value = 'http://182.119.61.14:38150/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:47:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6427c5e8-b9f1-5cfc-8cdd-bbafef7943ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.91.62.65:39927/i",
      "pattern": "[url:value = 'http://103.91.62.65:39927/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:32:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e18d8f78-07c0-53e0-9913-82a758e37ec4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wgzufvo.volleyball.casino/d69ed109-8c88-4ebd-9e7c-85722004accb",
      "pattern": "[url:value = 'https://wgzufvo.volleyball.casino/d69ed109-8c88-4ebd-9e7c-85722004accb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:32:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec8761a8-7e7e-5d4a-91be-7356110143a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.168.75:54129/bin.sh",
      "pattern": "[url:value = 'http://123.5.168.75:54129/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f1810c6-639c-5489-900f-5a331c118526",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.58.169:60524/bin.sh",
      "pattern": "[url:value = 'http://123.188.58.169:60524/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:26:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b23cb108-36ae-5350-8f52-55de892ac354",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.189.155.23:38727/bin.sh",
      "pattern": "[url:value = 'http://123.189.155.23:38727/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:26:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55d71827-0f5d-527d-87a7-1270f32216f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.149.111.45:36110/i",
      "pattern": "[url:value = 'http://175.149.111.45:36110/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:24:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd91bef6-00b1-5502-b9ea-81fda4f527db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.69.86.7:56006/i",
      "pattern": "[url:value = 'http://36.69.86.7:56006/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:23:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36c24ba0-5c0b-5150-925c-728d85469f3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bnhxiy.yasbetapp.com/5088506f-38dc-4a01-9ebd-7fc29591247a",
      "pattern": "[url:value = 'https://bnhxiy.yasbetapp.com/5088506f-38dc-4a01-9ebd-7fc29591247a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:17:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--950d709d-07f5-5217-9e63-9c2c88532e61",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.229.19:55174/i",
      "pattern": "[url:value = 'http://42.232.229.19:55174/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T12:15:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80644675-c7fb-5631-b44b-1a67dc8a287d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.116.120.105:34489/bin.sh",
      "pattern": "[url:value = 'http://182.116.120.105:34489/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:56:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05fbce7a-ece3-5cbf-9a93-918545dfa994",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.225.18:36131/bin.sh",
      "pattern": "[url:value = 'http://42.232.225.18:36131/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:55:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859211/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33c3203c-679c-5ddb-819c-0b76c0c7fb2d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://shgaxiz.volleyball.bet/57f3c81f-d04e-46e8-9fc6-50c1d62a0583",
      "pattern": "[url:value = 'https://shgaxiz.volleyball.bet/57f3c81f-d04e-46e8-9fc6-50c1d62a0583']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:53:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e92e64c3-c4fd-56e6-b974-8a3fcbe71044",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://164.163.25.157:41716/i",
      "pattern": "[url:value = 'http://164.163.25.157:41716/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:44:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37793712-ca22-55f3-a3ce-86aabb7d082f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.81.159:47136/i",
      "pattern": "[url:value = 'http://39.74.81.159:47136/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:41:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2beed419-6e5e-564b-826f-5dc6e5888b30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.81.159:47136/bin.sh",
      "pattern": "[url:value = 'http://39.74.81.159:47136/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:36:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d229da0f-d075-55f6-a8e2-0f147f0a4152",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.107.143:42657/i",
      "pattern": "[url:value = 'http://42.228.107.143:42657/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--802c2a33-6ee9-5407-8416-5d0c8a3ba920",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.199.218.56:9070/bin.sh",
      "pattern": "[url:value = 'http://94.199.218.56:9070/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:33:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--844e87e2-c01f-584d-a8e4-70736550c6fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.69.86.7:56006/bin.sh",
      "pattern": "[url:value = 'http://36.69.86.7:56006/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:32:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1874aeb3-42fe-5c0b-8cfb-a086be2465c8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.118.237:35787/i",
      "pattern": "[url:value = 'http://182.126.118.237:35787/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:30:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11135f8c-e6e2-55aa-b4e5-2ad07b51911e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.168.75:54129/i",
      "pattern": "[url:value = 'http://123.5.168.75:54129/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:25:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca443363-894b-5d66-9cb8-89d88624e678",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://164.163.25.157:41716/bin.sh",
      "pattern": "[url:value = 'http://164.163.25.157:41716/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:16:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8a03416-a26b-5289-a3b9-c2a4feb80230",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vvlainw.vip.tennis/6d04e913-8ea9-4573-95e4-2260893a9eb6",
      "pattern": "[url:value = 'https://vvlainw.vip.tennis/6d04e913-8ea9-4573-95e4-2260893a9eb6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:15:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac6c1198-1ac6-5871-bf8a-4d431e4503e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.43.33.196:39064/i",
      "pattern": "[url:value = 'http://125.43.33.196:39064/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:13:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a377322-2fc3-5184-9a35-afaf448d37a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gh6fn4zq.i90.bet/?ublib=ee7635fa-c412-4f3c-a40e-03b4292e63a2",
      "pattern": "[url:value = 'https://gh6fn4zq.i90.bet/?ublib=ee7635fa-c412-4f3c-a40e-03b4292e63a2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:13:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d2b5e79-e116-5063-a577-93effaf13680",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.229.19:55174/bin.sh",
      "pattern": "[url:value = 'http://42.232.229.19:55174/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31ddd573-89f9-5af3-b6b1-9d917d7617e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.232.213:35720/bin.sh",
      "pattern": "[url:value = 'http://222.137.232.213:35720/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:09:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce811b60-a15c-5647-897a-30e97034ceb7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mudeurb.vezaratshart.com/77740b73-cbea-424a-ac9e-6c35c4d7712d",
      "pattern": "[url:value = 'https://mudeurb.vezaratshart.com/77740b73-cbea-424a-ac9e-6c35c4d7712d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:09:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--028ee439-3727-5f2a-a4f2-f53fa29c7699",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/dbg",
      "pattern": "[url:value = 'http://176.65.139.144/dbg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1addf6a-ee23-5077-93ee-1c1bd1d1b83d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/arm5",
      "pattern": "[url:value = 'http://176.65.139.144/bins/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4239ed9-9ec0-5f20-b785-d8ccf00c4390",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/ppc",
      "pattern": "[url:value = 'http://176.65.139.144/bins/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a69ac1f-283a-590a-8310-e25b8ae13c8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/spc",
      "pattern": "[url:value = 'http://176.65.139.144/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8181c16d-77f7-5418-aab9-228e0bb35954",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151/Sakura.sh",
      "pattern": "[url:value = 'http://176.65.139.151/Sakura.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70f254d6-5fe6-5c4d-b5db-8267c0dbc4e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/sh4",
      "pattern": "[url:value = 'http://176.65.139.144/bins/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--859e9a03-75d1-5f68-be65-41cf7ed3a801",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/m68k",
      "pattern": "[url:value = 'http://176.65.139.144/bins/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3779d237-fe49-55a6-924a-fdd0cf133ab3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/arm",
      "pattern": "[url:value = 'http://176.65.139.144/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ca10380-915e-5790-8d09-336de6cceeb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/arm7",
      "pattern": "[url:value = 'http://176.65.139.144/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5eae5d5a-a86b-58ea-9506-0bcac5a992f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/i686",
      "pattern": "[url:value = 'http://176.65.139.144/bins/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a678a9c-7771-5095-8d58-2a9fbf1e93be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/arm6",
      "pattern": "[url:value = 'http://176.65.139.144/bins/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40ce5557-6ef8-57a6-bc15-568a549e248b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/spc",
      "pattern": "[url:value = 'http://176.65.139.144/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d401577-defe-5a9d-89df-3e0b30031836",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/ppc",
      "pattern": "[url:value = 'http://176.65.139.144/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58579e28-0032-55b9-83d3-c5b9e16b08ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/x86_64",
      "pattern": "[url:value = 'http://176.65.139.144/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df3eea15-90b4-5fe9-8c9b-7fe55efc437f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/x86_64",
      "pattern": "[url:value = 'http://176.65.139.144/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dd0fc81-0f7c-5300-be0e-d784400f870d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/dbg",
      "pattern": "[url:value = 'http://176.65.139.144/bins/dbg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b73ba88a-f636-51fb-953f-5bea9303b3d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/x86",
      "pattern": "[url:value = 'http://176.65.139.144/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f2473ac-0d2b-5f9a-b3b0-f231a3a84067",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/m68k",
      "pattern": "[url:value = 'http://176.65.139.144/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--465d4575-fd74-55e1-a31a-76e0652c7e3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/mpsl",
      "pattern": "[url:value = 'http://176.65.139.144/bins/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42969a33-9769-5922-9040-deff46c9e332",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.107.143:42657/bin.sh",
      "pattern": "[url:value = 'http://42.228.107.143:42657/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7356c5a2-e4c0-5b4d-9951-5c7793938930",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/mips",
      "pattern": "[url:value = 'http://176.65.139.144/bins/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--481d3614-2406-5aa0-835b-745eef9e4e64",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/cat.sh",
      "pattern": "[url:value = 'http://176.65.139.144/cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb47fc69-81d4-5967-aca0-459cf525daad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/x86",
      "pattern": "[url:value = 'http://176.65.139.144/bins/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a20c1d51-1a89-5c89-9053-c6536231ef9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/sh4",
      "pattern": "[url:value = 'http://176.65.139.144/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49077823-2a5f-5d81-8edd-27f8cef68d92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/i686",
      "pattern": "[url:value = 'http://176.65.139.144/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--991d76ed-0849-59c5-9158-04563525551c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/bins/cat.sh",
      "pattern": "[url:value = 'http://176.65.139.144/bins/cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:07:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25678ef1-55fc-5a43-a778-6f9262f57c8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/arm6",
      "pattern": "[url:value = 'http://176.65.139.144/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T11:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11517fe8-0065-5aca-9f70-fe08414c57c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zltxdjx.venusbet90.com/7ddadb26-fdee-4e7a-800d-4c5cfa404997",
      "pattern": "[url:value = 'https://zltxdjx.venusbet90.com/7ddadb26-fdee-4e7a-800d-4c5cfa404997']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:59:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9035406-8bf7-5640-a296-f45c9a7f0f1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://163.142.86.138:60944/i",
      "pattern": "[url:value = 'http://163.142.86.138:60944/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:47:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8006d30-e319-5a8e-9ae5-9b109a257d68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.202.170:36412/i",
      "pattern": "[url:value = 'http://182.113.202.170:36412/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:43:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bda1040e-b215-5ccf-b8ef-34a68209d6c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.1.200:53411/i",
      "pattern": "[url:value = 'http://110.36.1.200:53411/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:42:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21658c52-8199-5729-831e-e932fb4275fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.115.226:37413/i",
      "pattern": "[url:value = 'http://182.121.115.226:37413/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7efd9ce8-364f-515c-819c-6ccce83f1bdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.43.33.196:39064/bin.sh",
      "pattern": "[url:value = 'http://125.43.33.196:39064/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:31:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f683e87b-4af6-593b-b0d4-57d27f2c110a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.32.97:42939/bin.sh",
      "pattern": "[url:value = 'http://123.14.32.97:42939/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:23:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42d450e4-7394-52dc-9fe8-c689603c53d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.53.135:55865/i",
      "pattern": "[url:value = 'http://27.215.53.135:55865/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:22:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c060912-4ea1-5e8f-9a9e-66ceee88270f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ffrpwns.vbetirani.com/edfb54aa-d429-454e-b5be-0d6ac675f87d",
      "pattern": "[url:value = 'https://ffrpwns.vbetirani.com/edfb54aa-d429-454e-b5be-0d6ac675f87d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8245eb49-0746-5982-981f-ba445a92aecb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.202.170:36412/bin.sh",
      "pattern": "[url:value = 'http://182.113.202.170:36412/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:20:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df82b52b-d0ae-5c9a-b1e7-5bec77cd7725",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.77.199:53437/i",
      "pattern": "[url:value = 'http://123.11.77.199:53437/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b85d1988-1a81-5309-915c-70895a219697",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ukmcha.yasbet90.com/1f8565b3-e7f7-4d0c-a14c-755db680c2ba",
      "pattern": "[url:value = 'https://ukmcha.yasbet90.com/1f8565b3-e7f7-4d0c-a14c-755db680c2ba']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:16:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3db2c4a0-85e7-537c-bf1a-8f0503c5c5cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.77.199:53437/bin.sh",
      "pattern": "[url:value = 'http://123.11.77.199:53437/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T10:15:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38cff40b-0a30-5160-a5ee-188cd6f6aea9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.229.151.147:52080/bin.sh",
      "pattern": "[url:value = 'http://42.229.151.147:52080/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:56:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f32cfb97-8caa-59c9-a1f1-093d931b749a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.98.97.184:34651/i",
      "pattern": "[url:value = 'http://112.98.97.184:34651/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:52:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d2acbaf-a7e5-571c-8b63-5097e0165fb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.78.182.101:34099/bin.sh",
      "pattern": "[url:value = 'http://39.78.182.101:34099/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:51:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--196553e9-eee7-5282-87bb-a33f364b11a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nekdncv.usa2026.bet/1f167c13-e345-4be0-917f-e6ab2e011b28",
      "pattern": "[url:value = 'https://nekdncv.usa2026.bet/1f167c13-e345-4be0-917f-e6ab2e011b28']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07b5abda-7e50-5a84-bce5-580a7028c9eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.178.140:59972/i",
      "pattern": "[url:value = 'http://182.127.178.140:59972/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:39:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aba7c12e-61e3-5343-9da2-aa0e8d141f73",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.53.135:55865/bin.sh",
      "pattern": "[url:value = 'http://27.215.53.135:55865/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:38:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dec41607-b6c1-546c-9089-0c5b102ecfdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.220.114.3:48953/i",
      "pattern": "[url:value = 'http://27.220.114.3:48953/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:20:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26859802-33cf-558a-a732-0309ef233a39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.71.160:55615/i",
      "pattern": "[url:value = 'http://182.119.71.160:55615/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:19:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e3414fd-c991-5b10-aa9e-5f72dc54eabf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.78.182.101:34099/i",
      "pattern": "[url:value = 'http://39.78.182.101:34099/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:18:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d222ac2d-a580-5d83-b48c-0e52a8e10044",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.178.140:59972/bin.sh",
      "pattern": "[url:value = 'http://182.127.178.140:59972/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:16:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--948a4aca-6ad2-598d-8829-47364b44c7a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.31.141:54460/bin.sh",
      "pattern": "[url:value = 'http://42.231.31.141:54460/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:15:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--826216b8-2e0d-5dbb-8643-19f4a01b867a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://edfwndp0.chloroquineser.com/?ublib=0f9964f0-6866-45fb-abd1-3f855955f13b",
      "pattern": "[url:value = 'https://edfwndp0.chloroquineser.com/?ublib=0f9964f0-6866-45fb-abd1-3f855955f13b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--527fdd33-f938-5313-ba23-fe24d9360362",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.98.97.184:34651/bin.sh",
      "pattern": "[url:value = 'http://112.98.97.184:34651/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08330ee4-cc4f-5b46-b00d-c9e3e1ee8ae3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dnmjqvy.trmegapari.com/5fee984e-a5a5-4153-b9c5-0c434d92d224",
      "pattern": "[url:value = 'https://dnmjqvy.trmegapari.com/5fee984e-a5a5-4153-b9c5-0c434d92d224']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T09:08:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4ae9a71-4c27-5fb2-b915-9d4eba9d5209",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.156.130:59062/bin.sh",
      "pattern": "[url:value = 'http://125.45.156.130:59062/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:52:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f869b88-baeb-58e1-af3b-4c3a2805b6b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ritubohara.com/stego_payloa.png",
      "pattern": "[url:value = 'https://ritubohara.com/stego_payloa.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:47:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06878a83-7796-52eb-bf3b-ef8be107b589",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/450/img_230050.png",
      "pattern": "[url:value = 'http://104.168.115.123/450/img_230050.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--498c370b-85a1-5f79-9acc-fcb4dcd78882",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dofahospitals.com/xw/phan.dat",
      "pattern": "[url:value = 'https://dofahospitals.com/xw/phan.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95dbf723-a55b-50a9-983a-623dffc8af87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/450/mybestgirlfriendonmybestfeelnigsforme.hta",
      "pattern": "[url:value = 'http://104.168.115.123/450/mybestgirlfriendonmybestfeelnigsforme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54eac395-9daf-5bc6-9d0f-a49cd6664fb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://globaltechnosoft.com/beascuyr/obdSAif.txt",
      "pattern": "[url:value = 'https://globaltechnosoft.com/beascuyr/obdSAif.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:45:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4209aa2d-4762-5764-b9e2-eff30d0cf3b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pastefy.app/lqjXi6ru/raw",
      "pattern": "[url:value = 'https://pastefy.app/lqjXi6ru/raw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:45:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e82d8a9-1adb-5792-a319-a4043c6c68e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-33172110f57a4bbfa0c089261c8b7d4d.r2.dev/msbuil.png",
      "pattern": "[url:value = 'https://pub-33172110f57a4bbfa0c089261c8b7d4d.r2.dev/msbuil.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:45:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f31ea0ff-78af-57b5-b474-9a537345ebdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/euaeq",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/euaeq']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:44:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c25b173c-e5ec-5dae-a7e9-58da59a0897e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-33172110f57a4bbfa0c089261c8b7d4d.r2.dev/cas1.png",
      "pattern": "[url:value = 'https://pub-33172110f57a4bbfa0c089261c8b7d4d.r2.dev/cas1.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe3fff61-1085-5ffd-bf41-f92c2a76382d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://trade-eprex.pro/wp-admin/network/wp-debug/stubz.ps1",
      "pattern": "[url:value = 'https://trade-eprex.pro/wp-admin/network/wp-debug/stubz.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--472b2c3d-a095-5555-81e4-8814e44e8f73",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.tradedsglobal.com/yuyu/yunewbuy.png",
      "pattern": "[url:value = 'http://www.tradedsglobal.com/yuyu/yunewbuy.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:38:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3d35ed8-c99f-5602-b860-ff0ff1209b38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.tradedsglobal.com/yuyu/rumpyu.png",
      "pattern": "[url:value = 'http://www.tradedsglobal.com/yuyu/rumpyu.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:37:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee103c6d-2b97-55e7-8ea9-bc5862eb10d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.226.223.139:53794/i",
      "pattern": "[url:value = 'http://42.226.223.139:53794/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:33:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23260f8b-28f5-50c9-84b9-447b20ee925c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.226.223.139:53794/bin.sh",
      "pattern": "[url:value = 'http://42.226.223.139:53794/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:28:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98e6c617-f075-5421-91e3-c75aa15a6570",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.177.28.149:45642/Mozi.m",
      "pattern": "[url:value = 'http://203.177.28.149:45642/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:28:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11aa0892-9252-5e19-bd07-9666bf562cbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.14.59:38383/i",
      "pattern": "[url:value = 'http://182.112.14.59:38383/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:27:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8cdc5bd-1fe2-5f66-88c4-515b7190f2ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bagkqzj.zeppelin.bet/04e8ad7c-0a7c-46ff-a488-1c880eb0131c",
      "pattern": "[url:value = 'https://bagkqzj.zeppelin.bet/04e8ad7c-0a7c-46ff-a488-1c880eb0131c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:25:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9af65579-40f9-56c9-b106-0491d092a089",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.204.197.147:39822/i",
      "pattern": "[url:value = 'http://27.204.197.147:39822/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:24:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8059bfea-b5c4-58cd-a6cf-c9e6e92cf494",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kgebll.xenicalby6.com/59ef435c-fc65-4a8d-b686-84252cd4309a",
      "pattern": "[url:value = 'https://kgebll.xenicalby6.com/59ef435c-fc65-4a8d-b686-84252cd4309a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:16:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07aac0f9-1b17-5a1b-8729-048121f5c580",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.146.244.185:50487/bin.sh",
      "pattern": "[url:value = 'http://175.146.244.185:50487/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:15:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--271bbe2b-0c3b-5678-a1af-876fe6c77384",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tjvdbbc.yektbet.bet/bdca0698-2006-4001-88ff-16389c533193",
      "pattern": "[url:value = 'https://tjvdbbc.yektbet.bet/bdca0698-2006-4001-88ff-16389c533193']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:15:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8d8eb0d-27c8-59bb-9f22-23c1617b331a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.146.244.185:50487/i",
      "pattern": "[url:value = 'http://175.146.244.185:50487/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:14:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--005ce4f5-0fd1-5db3-b5e7-dbaa738995f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/freda01.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/freda01.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:10:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e681775e-9bb6-5f59-a45b-702bb6ea7514",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1vUVHzf-ShHquhtYvcv1cQ7yohXE6QRb4",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1vUVHzf-ShHquhtYvcv1cQ7yohXE6QRb4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:10:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45eca5b4-a3a2-5aed-89ee-afdf50ea57b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1pXgIs9sI8wdGhxG7TMI5hiobg4L_uKyQ",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1pXgIs9sI8wdGhxG7TMI5hiobg4L_uKyQ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:10:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7ca3677-2c0a-591c-af52-1cf3242c6d5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://git.nightcord.ru/nightcord/nightcord/releases/download/v1.19.4/Nightcord-Installer.exe",
      "pattern": "[url:value = 'https://git.nightcord.ru/nightcord/nightcord/releases/download/v1.19.4/Nightcord-Installer.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:07:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbecbcde-1295-512f-8b36-295952c6635e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/arm7",
      "pattern": "[url:value = 'http://smart.abuse.st/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:07:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93e46ca3-b0de-5835-831b-42ecb76045d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/x86_64",
      "pattern": "[url:value = 'http://smart.abuse.st/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23313ee0-6c0e-5c21-acd7-bc9f7691a076",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/mpsl",
      "pattern": "[url:value = 'http://smart.abuse.st/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d6fdeee-a0a8-5cb3-9a0e-86344fb49e21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/arm5",
      "pattern": "[url:value = 'http://smart.abuse.st/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--552cbc5e-8808-5aa3-8ded-fd400bb3a756",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cpteijd.yekbetiran.com/fa7ee749-23f8-4679-8332-f2cce7b74e3e",
      "pattern": "[url:value = 'https://cpteijd.yekbetiran.com/fa7ee749-23f8-4679-8332-f2cce7b74e3e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9fa22f7-0109-5ae3-a468-537febf6ad29",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kazwbt9n.2026.futbol/?ublib=ca942a90-68b5-4f2e-bc48-a0b451072474",
      "pattern": "[url:value = 'https://kazwbt9n.2026.futbol/?ublib=ca942a90-68b5-4f2e-bc48-a0b451072474']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:03:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef14ebf2-a84f-56e7-80a5-6fe305c1a94e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://lgwzmtt.yek1bet.bet/372a3933-716e-489a-ac9f-b72662c39d71",
      "pattern": "[url:value = 'https://lgwzmtt.yek1bet.bet/372a3933-716e-489a-ac9f-b72662c39d71']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T08:00:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84d0c303-7632-5ffa-88c8-45e51dfe6cb4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.229.151.147:52080/i",
      "pattern": "[url:value = 'http://42.229.151.147:52080/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:57:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8e2ce48-3079-51f2-9c38-8d56f7919f95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.117.53:58381/i",
      "pattern": "[url:value = 'http://115.55.117.53:58381/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:55:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd6c19d6-ecd1-519b-9e36-cd6510f374d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.103.32:46711/bin.sh",
      "pattern": "[url:value = 'http://112.248.103.32:46711/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:39:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39fa32ef-f74f-5266-8805-8f794a103eae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.26.232:48120/i",
      "pattern": "[url:value = 'http://222.141.26.232:48120/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35600c87-8674-5a11-918c-b3dee5205135",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.14.59:38383/bin.sh",
      "pattern": "[url:value = 'http://182.112.14.59:38383/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:27:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3225b92-76bf-5707-8017-f75931f6b2bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.26.232:48120/bin.sh",
      "pattern": "[url:value = 'http://222.141.26.232:48120/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:26:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8660b8bc-bfe8-5b9c-8fe9-a7dc3b3616f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://afdaqyu.yasbet.casino/3dddd506-1f0d-43b9-83a9-0fdeb20be67e",
      "pattern": "[url:value = 'https://afdaqyu.yasbet.casino/3dddd506-1f0d-43b9-83a9-0fdeb20be67e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:22:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2d0c340-a3d7-5cf3-9011-5416d1ae2f4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.80.22:51497/i",
      "pattern": "[url:value = 'http://182.127.80.22:51497/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:17:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37811a04-1f9d-50fb-b08d-dd347cd61fbb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xcpvjq6r.cerocarey.com/?ublib=100582df-2acc-4be2-a34c-ef20bc4a569d",
      "pattern": "[url:value = 'https://xcpvjq6r.cerocarey.com/?ublib=100582df-2acc-4be2-a34c-ef20bc4a569d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T07:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--082ea274-315e-5577-967d-dd8a0e8694e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.182.162:57397/bin.sh",
      "pattern": "[url:value = 'http://42.231.182.162:57397/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:57:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c25e9175-6ad3-5f6f-92f4-e64dd59f6252",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.80.22:51497/bin.sh",
      "pattern": "[url:value = 'http://182.127.80.22:51497/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:54:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51bc3204-89a0-5cd5-806a-0b7defc678d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tqdtntx.hotbet90.casino/252500e7-98e9-48d9-9c16-53a0d896024c",
      "pattern": "[url:value = 'https://tqdtntx.hotbet90.casino/252500e7-98e9-48d9-9c16-53a0d896024c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:44:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1e7bfdb-8762-5129-a666-2932794028a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.236.127.99:47004/i",
      "pattern": "[url:value = 'http://113.236.127.99:47004/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4603baff-50f9-591b-9870-ac7b3bf3f4d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.74.81.185:47990/i",
      "pattern": "[url:value = 'http://39.74.81.185:47990/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd214a2a-ff2e-57d5-a2de-1221c7438a49",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.101.161:37345/bin.sh",
      "pattern": "[url:value = 'http://112.248.101.161:37345/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:36:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9115761d-2378-5361-b399-6c4dc25f450b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.arm",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--477ea908-d8fa-539f-a188-d6de1796b434",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.spc",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--181dec84-3c65-5f53-bd4e-7361be90d79f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.arm6",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b06e80b3-06c7-5da1-8bc6-1d5be75c0f3c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.m68k",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb5bdf0e-ea4e-52b0-89cd-68bc7a9a6a07",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.x86",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31c4dd0b-df9a-597e-a75a-b10dabb926a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.sh4",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08fc630c-2f2c-50bc-a0b9-50a9bf601bf2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.mpsl",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8b8347c-617b-5805-9355-4ef5fa8cd370",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.arm7",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71178118-e7d3-5e73-be1e-7b9f575bad58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.arm5",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6885dc73-1321-56b0-9e27-e671498be90d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.mips",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:35:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5333faa3-5113-51ec-bc5d-9c6618e2365c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.135.194.3/hiddenbin/boatnet.ppc",
      "pattern": "[url:value = 'http://45.135.194.3/hiddenbin/boatnet.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:34:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859080/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0da0900d-c41e-523b-a225-42842df50e8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://105.224.251.135:51433/i",
      "pattern": "[url:value = 'http://105.224.251.135:51433/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:34:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0af4848-768b-5435-90d4-82f373282bf4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xeanui.x50wheel.bet/8e1583cb-5e86-4b46-8aa0-cc6151ddd088",
      "pattern": "[url:value = 'https://xeanui.x50wheel.bet/8e1583cb-5e86-4b46-8aa0-cc6151ddd088']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:34:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859079/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7628e49f-052e-596b-8de2-08417583093c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.236.127.99:47004/bin.sh",
      "pattern": "[url:value = 'http://113.236.127.99:47004/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:29:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859078/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26c504b7-4dc4-517e-b404-b5609b7aa6cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/arm5",
      "pattern": "[url:value = 'http://176.65.139.144/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859076/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59c4cd03-7967-53e5-bfa5-86a0fa2178a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/mpsl",
      "pattern": "[url:value = 'http://176.65.139.144/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859077/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12ebb10d-8daa-5514-9640-aae7697cc7fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/mips",
      "pattern": "[url:value = 'http://176.65.139.144/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:21:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859075/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--574f8d48-5e71-5901-a6b3-3cea5c058643",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/arm",
      "pattern": "[url:value = 'http://176.65.139.144/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:20:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859073/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44626245-b6d2-5278-8bca-773b809a531d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.144/arm7",
      "pattern": "[url:value = 'http://176.65.139.144/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:20:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859074/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--393a5e30-f235-5cd5-ad85-d1d184153328",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.178.61.135:38869/i",
      "pattern": "[url:value = 'http://42.178.61.135:38869/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859072/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b006a675-d5a8-5930-9c2b-cf5e64d7dad4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rosebaie.ma/wp-includes/js/jcrop/Jcropmin.exe",
      "pattern": "[url:value = 'https://rosebaie.ma/wp-includes/js/jcrop/Jcropmin.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:10:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859071/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7899fd29-7744-55fb-b632-036805f82712",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rosebaie.ma/wp-includes/js/jcrop/Jcropgif.exe",
      "pattern": "[url:value = 'https://rosebaie.ma/wp-includes/js/jcrop/Jcropgif.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859069/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4688773-21a7-5859-9ce4-00c5d50d2eff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rosebaie.ma/wp-includes/js/jcrop/jqueryJcrop.php",
      "pattern": "[url:value = 'https://rosebaie.ma/wp-includes/js/jcrop/jqueryJcrop.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859070/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--313573ff-1d27-53d9-a603-8b443e6cf097",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dlkcsdq.hotbet90app.com/82728660-32b7-415c-a77f-fc0e14afa762",
      "pattern": "[url:value = 'https://dlkcsdq.hotbet90app.com/82728660-32b7-415c-a77f-fc0e14afa762']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T06:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859068/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a18f5f88-95ee-5ea2-90fd-e08fbd6cef8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.63.144.173:37265/i",
      "pattern": "[url:value = 'http://115.63.144.173:37265/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:54:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859067/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c7e19f3-0090-54ad-8d74-716f32c29843",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://eehjqhe.homa.bet/7463fdb1-6ddc-4820-a2ae-0a92b0e59578",
      "pattern": "[url:value = 'https://eehjqhe.homa.bet/7463fdb1-6ddc-4820-a2ae-0a92b0e59578']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:54:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859066/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf9e302e-0c47-5784-b65e-f194090beb67",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://202.9.122.145:56390/Mozi.m",
      "pattern": "[url:value = 'http://202.9.122.145:56390/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859064/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6c94852-1a5e-5f94-a29c-4204f16eb176",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.255.18.214:36405/Mozi.a",
      "pattern": "[url:value = 'http://72.255.18.214:36405/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859065/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6047ec7-1b2f-51f0-9627-2fddb1dd7c13",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://105.186.143.24:59469/Mozi.m",
      "pattern": "[url:value = 'http://105.186.143.24:59469/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859054/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bda0b9d-7657-5137-ae7c-3c5d1c8fe260",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://223.123.35.47:54367/Mozi.a",
      "pattern": "[url:value = 'http://223.123.35.47:54367/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859055/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6f4202f-d06d-5160-9bd9-e8a3d37c7663",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.229.33.220:50854/Mozi.m",
      "pattern": "[url:value = 'http://124.229.33.220:50854/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859056/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b8ae476-df48-57c5-b78d-f1bbfd25e538",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.176.16.78:51683/Mozi.m",
      "pattern": "[url:value = 'http://103.176.16.78:51683/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859057/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2b579d0-335f-5c77-85dd-e262292547a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.189.212.129:44218/Mozi.m",
      "pattern": "[url:value = 'http://119.189.212.129:44218/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859058/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bfb37e1-47a4-560c-bfb6-9cc7c1376ae1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.29.194.26:42356/Mozi.m",
      "pattern": "[url:value = 'http://124.29.194.26:42356/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859059/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2828b01-70e3-527e-bc4c-92400c0cdda5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://153.117.32.174:49040/Mozi.m",
      "pattern": "[url:value = 'http://153.117.32.174:49040/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859060/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cda3b3bf-7aca-5da3-9088-4a8e506cb677",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.181.160.22:37187/Mozi.a",
      "pattern": "[url:value = 'http://103.181.160.22:37187/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859061/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b300ceb0-ceae-5d67-b979-a5181da39386",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://95.82.118.182:44093/Mozi.m",
      "pattern": "[url:value = 'http://95.82.118.182:44093/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859062/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e394acd6-4625-5b2c-a281-f73e23ded972",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.218.245:48087/Mozi.a",
      "pattern": "[url:value = 'http://110.38.218.245:48087/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859063/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df4e1ab4-2b1a-5f9b-8ae5-f2a26f752b1c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.255.19.244:41921/Mozi.a",
      "pattern": "[url:value = 'http://72.255.19.244:41921/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859053/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80b9ae2b-a4df-5df3-aa96-e74dfede8dfe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://206.135.174.164:39528/Mozi.a",
      "pattern": "[url:value = 'http://206.135.174.164:39528/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859046/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e47cd78a-a6fa-5a65-84f0-4b9520f19deb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://223.123.42.237:53019/Mozi.m",
      "pattern": "[url:value = 'http://223.123.42.237:53019/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859047/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd6f3802-af18-52d0-b853-e97cf5f70bee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://202.70.139.56:60896/Mozi.a",
      "pattern": "[url:value = 'http://202.70.139.56:60896/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859048/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1926e1c-0bf4-5978-aebb-c7019fa3d422",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.176.16.167:60492/Mozi.a",
      "pattern": "[url:value = 'http://103.176.16.167:60492/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859049/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c3fc6b3-e968-54aa-bc83-6593ce855e7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.38.254.160:50664/Mozi.m",
      "pattern": "[url:value = 'http://110.38.254.160:50664/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859050/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c228d14-347f-574f-a5f8-4bfdfd6fcdd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://153.117.37.25:36970/Mozi.a",
      "pattern": "[url:value = 'http://153.117.37.25:36970/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859051/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b8fc963-50d9-5700-8e35-26056fa7b5bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://111.55.74.100:52721/Mozi.m",
      "pattern": "[url:value = 'http://111.55.74.100:52721/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859052/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bec2c89e-c858-5fec-bfba-479b325914fa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://189.174.142.184:56193/Mozi.m",
      "pattern": "[url:value = 'http://189.174.142.184:56193/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859045/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26314aa7-7ac7-5fb8-acc4-5b9db4c4836f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://217.60.199.225/dissarm4",
      "pattern": "[url:value = 'http://217.60.199.225/dissarm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859044/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b43c1018-b395-5bb2-bbc9-2463ff8836f4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://smart.abuse.st/mips",
      "pattern": "[url:value = 'http://smart.abuse.st/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859042/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9eb103d-3778-503d-a38a-3661e57a421a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.176.80.131:60859/Mozi.a",
      "pattern": "[url:value = 'http://59.176.80.131:60859/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:52:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859043/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81d2a88f-0d66-57cf-9f36-64dca3db0d92",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/powerpc",
      "pattern": "[url:value = 'http://46.23.108.238/powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:51:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859040/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13180ad4-534e-5339-ac65-8212642e4526",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/m68k",
      "pattern": "[url:value = 'http://46.23.108.238/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:51:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859041/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69b8c5ef-8aa5-59b2-8804-aef13b6faa4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/armv6l",
      "pattern": "[url:value = 'http://46.23.108.238/armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:50:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859039/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d18760b-919f-56ae-a739-7bd2ada0863d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/i686",
      "pattern": "[url:value = 'http://46.23.108.238/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:49:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859038/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bee4c9e6-1040-5418-ab8f-4713bb3043a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/sparc",
      "pattern": "[url:value = 'http://46.23.108.238/sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859037/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a5d1ec7-d1ab-5a34-8da6-8936bd3c8577",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/armv7l",
      "pattern": "[url:value = 'http://46.23.108.238/armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:49:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859035/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcf547da-d926-58a9-aa28-1d4830871dd2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/i586",
      "pattern": "[url:value = 'http://46.23.108.238/i586']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:49:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859036/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0534951d-31c3-54d1-af17-8cd5e68499b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/armv5l",
      "pattern": "[url:value = 'http://46.23.108.238/armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:49:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859033/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8522ed5e-3e7f-5604-83ba-c58b7bbd29d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/armv4l",
      "pattern": "[url:value = 'http://46.23.108.238/armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:49:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859034/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e27a917a-4729-50f1-8f43-bba3ac0f0c68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.187.118:60374/i",
      "pattern": "[url:value = 'http://112.248.187.118:60374/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:47:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859032/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--586fba9c-d55b-5d19-aa57-fa4ed12d04b5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.178.61.135:38869/bin.sh",
      "pattern": "[url:value = 'http://42.178.61.135:38869/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:47:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859031/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae44fd3a-ddde-5b06-a043-31b8e45f06c4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.210.61:54865/i",
      "pattern": "[url:value = 'http://27.215.210.61:54865/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859030/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6be51ec2-1ec0-5f43-8e62-2df331b154f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/x86",
      "pattern": "[url:value = 'http://46.23.108.238/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:35:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859029/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65e51c7a-f72c-5cf0-9c22-f6caffd90c6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/sh4",
      "pattern": "[url:value = 'http://46.23.108.238/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859026/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54694da4-1971-593a-ae4b-8af5c763ab33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/mipsel",
      "pattern": "[url:value = 'http://46.23.108.238/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859027/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--129c4a23-ab41-5455-a16d-682a485848be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.23.108.238/mips",
      "pattern": "[url:value = 'http://46.23.108.238/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:35:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859028/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c003485-775e-5b8e-b8b5-b19a48120093",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.230.155:54819/i",
      "pattern": "[url:value = 'http://125.41.230.155:54819/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859025/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d84b467-c68f-50d0-a1c4-c15b14f3a17d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.187.118:60374/bin.sh",
      "pattern": "[url:value = 'http://112.248.187.118:60374/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:28:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859023/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af465247-54e8-53da-aaf3-2cb6b2f7d583",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.233.40:41750/i",
      "pattern": "[url:value = 'http://123.14.233.40:41750/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:28:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859024/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b60827af-498f-5e91-9092-6a558b8c0396",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.63.144.173:37265/bin.sh",
      "pattern": "[url:value = 'http://115.63.144.173:37265/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:22:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859022/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c00d81a-9d5c-5283-ac94-e6c20555db60",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.79.141.16:35636/bin.sh",
      "pattern": "[url:value = 'http://39.79.141.16:35636/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859021/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bea78a0-9a16-500e-b45b-84766dcb250f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bloomglow9.com/zxc/mdw",
      "pattern": "[url:value = 'https://bloomglow9.com/zxc/mdw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:20:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859020/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f2588ba-3877-5f37-8a0b-0eee27bd3f3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bloomglow9.com/zxc/kito",
      "pattern": "[url:value = 'https://bloomglow9.com/zxc/kito']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:20:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859019/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f74ef9a7-06a7-53b0-8fb1-1af8a5ce3716",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://anvil-89.com/curl/76011de550817b5869456ca678d74d1d4fb86045d51749bb87e1f2ef6d40bc12",
      "pattern": "[url:value = 'https://anvil-89.com/curl/76011de550817b5869456ca678d74d1d4fb86045d51749bb87e1f2ef6d40bc12']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:20:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859015/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbda268e-e7c3-58a7-9438-4c3cd3c1e56b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://anvil-89.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update",
      "pattern": "[url:value = 'https://anvil-89.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:20:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859016/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--705c2c11-9001-5b07-ad2c-ae0bf25e3b25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://158.94.208.104/x7GkP2mQ9zL4/student_1.bin",
      "pattern": "[url:value = 'http://158.94.208.104/x7GkP2mQ9zL4/student_1.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:20:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859017/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ba1163b-5084-5760-97bc-ce362dfb774a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://159.89.171.49/wp-admin/",
      "pattern": "[url:value = 'http://159.89.171.49/wp-admin/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:20:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859018/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1c07806-0522-56fb-8935-84d2b25a8b82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.armv5l",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:19:02Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859014/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29784f1c-6815-5c82-a72d-b160f22ad0af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.sparc",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:19:00Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859013/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd24e6ca-0a5b-5ae4-8b22-a986bc0dd5a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.mips64",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.mips64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:57Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859012/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e0d97a5-db9d-5d2d-bca2-214bb1cc84cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.powerpc",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:56Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859011/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfa4d792-c9d7-5684-b753-60b269b4dba7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/19io",
      "pattern": "[url:value = 'http://188.132.232.81/19io']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:55Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859008/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b034ca1b-831c-5fb9-8a8b-aa9501a63d7f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.ppc",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:55Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859009/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31dca35d-b66b-50c9-8a13-fef38aa7972c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.x86",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:55Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859010/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a70915c-abc2-5607-a095-316d15039bcf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_aarch64",
      "pattern": "[url:value = 'http://5.175.223.249/data_aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:54Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859006/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcdf0491-95fb-5a5f-a9ed-b01db3661da4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/XmgG",
      "pattern": "[url:value = 'http://188.132.232.81/XmgG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:54Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859007/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3b828ad-e341-537c-9957-c2ac60b17716",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Mn0r",
      "pattern": "[url:value = 'http://188.132.232.81/Mn0r']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:50Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859005/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dec5365-0b95-56cc-9e2f-fc23f27c9127",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/azAJ",
      "pattern": "[url:value = 'http://188.132.232.81/azAJ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859002/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bde398a1-a672-57d6-98d0-a261b4550452",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/lXhZ",
      "pattern": "[url:value = 'http://188.132.232.81/lXhZ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859003/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe191e04-1128-5a8d-a1d9-bbd26e6aee69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ell",
      "pattern": "[url:value = 'http://188.132.232.81/ell']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:49Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859004/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1c096bc-787b-5086-b4ec-aa86f4d42306",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.arm6",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:47Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859000/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d674120-d113-5a24-8504-624d28233bb7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.m68k",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:47Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3859001/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab3ea034-9e14-520a-bebd-1b909e72cda3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/O2d",
      "pattern": "[url:value = 'http://188.132.232.81/O2d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858997/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0175f5d-e252-51df-92ce-6bbd674da3ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.arm7",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858998/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28d4225f-e28f-580c-976b-07c213cee14d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_arm6",
      "pattern": "[url:value = 'http://5.175.223.249/data_arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858999/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9f264fc-ea77-5eaa-8dbf-d6446d8bf272",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/h87q",
      "pattern": "[url:value = 'http://188.132.232.81/h87q']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858995/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cde06df1-0f1d-5211-a6c6-6370c3bc59e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/hskK",
      "pattern": "[url:value = 'http://188.132.232.81/hskK']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:43Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858996/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c98e0141-1a1d-5318-ab0c-e1ccdd9505b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Ok4",
      "pattern": "[url:value = 'http://188.132.232.81/Ok4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858992/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f56361b-fa26-5e45-918a-eca49ea79b32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/305b",
      "pattern": "[url:value = 'http://188.132.232.81/305b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858993/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce18bdee-b2be-5dba-acfc-8d18be3c8763",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/bcM5",
      "pattern": "[url:value = 'http://188.132.232.81/bcM5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858994/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c62c090f-037d-592e-866b-16725496a352",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://169.40.104.99/data_arm5",
      "pattern": "[url:value = 'http://169.40.104.99/data_arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858990/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57101f4c-db9c-5cf6-8eb3-3cdafa503fa1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.x86_64",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858991/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c90225ea-2066-505c-8031-f5a9ca7320f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.sh4",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858986/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4061bf86-27be-526f-98b4-26246bb8b8dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.i486",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858987/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4728ac46-5e5c-52bf-a192-1a6d0857bf33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://169.40.104.99/data_mips",
      "pattern": "[url:value = 'http://169.40.104.99/data_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858988/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75f48497-82b0-5081-9126-c9ab14b8438e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.armv6l",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858989/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9b0cad8-9112-54f1-b6bd-2ad5ddea90fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.armv7l",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858984/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc6e000d-dd8e-5c8a-abed-45c0bc6b3884",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.mipsel",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858985/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--537c4b5d-939e-59f7-8050-b206697431db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://169.40.104.99/data_arm6",
      "pattern": "[url:value = 'http://169.40.104.99/data_arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858981/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8879a244-df5d-5ce8-b42d-9f4ef33f0878",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.arc",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858982/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55369e05-2950-5e5c-b495-540546a3b865",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.aarch64",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858983/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25aa44e9-c5e3-5b01-b6c6-84addebf3f50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://169.40.104.99/data_arm7",
      "pattern": "[url:value = 'http://169.40.104.99/data_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858980/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651f6817-b9c8-512a-94e3-09336e3d6195",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.m68k",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858976/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3374b7ab-32c4-53e0-99c2-4cc05be39b8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.mips",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858977/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce9b86e0-885f-5cf5-b399-f192c0cfdcee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://169.40.104.99/data_arm4",
      "pattern": "[url:value = 'http://169.40.104.99/data_arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858978/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--311d70a0-1b5b-5eb5-8380-4fde6a433740",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/.Sassy.armv4l",
      "pattern": "[url:value = 'http://176.65.139.121/.Sassy.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858979/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a26a0496-99a5-5ebe-84a7-bc4c9fcae4f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_mipsel",
      "pattern": "[url:value = 'http://5.175.223.249/data_mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858969/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ad94bff-5a00-5fcb-ac38-c8ca41e12b24",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_mips-uclibc",
      "pattern": "[url:value = 'http://5.175.223.249/data_mips-uclibc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858970/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--450a501b-4b12-5d2e-95bb-52033bf1d3cc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.i686",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858971/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a231d9c1-2990-5179-8a59-6538a29da830",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.sh4",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858972/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--690c203d-9b7e-56f5-aaf9-908283ea9191",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.mips",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858973/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0658924b-c4fd-5b1a-85f6-e9c0478a1cdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.arc",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858974/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1401f6f8-57a8-53c3-85df-e9e0e2b9e9fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.x86_64",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858975/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c825d23-3691-55c3-8e65-977b2603c447",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.mpsl",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858967/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac706f6f-adb3-540a-9952-0bdd950f5367",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.sparc",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858968/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a93c826-ec19-5307-a52a-5bd4503b7ad2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_arm7",
      "pattern": "[url:value = 'http://5.175.223.249/data_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858959/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--813f9134-0d6a-5db7-ba0e-5473324b27df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_arm5",
      "pattern": "[url:value = 'http://5.175.223.249/data_arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858960/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c31e7be3-ba34-52c2-835c-a480e864ec83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_powerpc",
      "pattern": "[url:value = 'http://5.175.223.249/data_powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858961/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5f7f237-643a-5f47-9421-fbc9831561dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_arm4",
      "pattern": "[url:value = 'http://5.175.223.249/data_arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858962/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01586f6b-4be5-50d2-8f6e-81b39e200383",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_mips",
      "pattern": "[url:value = 'http://5.175.223.249/data_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858963/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80d51020-b354-5d18-9ca3-e5a4c9af94cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_x86_64",
      "pattern": "[url:value = 'http://5.175.223.249/data_x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858964/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--610ad67d-cf28-5dd4-9163-e4f869436320",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_mipsel-uclibc",
      "pattern": "[url:value = 'http://5.175.223.249/data_mipsel-uclibc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858965/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--195a3223-dc5b-5009-80e1-41ab6848171d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ED5H",
      "pattern": "[url:value = 'http://188.132.232.81/ED5H']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858966/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31458929-14d9-51ae-9b85-7152af78b0eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/nQd",
      "pattern": "[url:value = 'http://188.132.232.81/nQd']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858958/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fdb8653-2e75-5052-9233-91972b21f34d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/rnY",
      "pattern": "[url:value = 'http://188.132.232.81/rnY']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858957/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01291e72-36af-59ff-8c08-f83da580d6f7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/kAqy",
      "pattern": "[url:value = 'http://188.132.232.81/kAqy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858953/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2af372af-a57a-564f-bd3e-4681b81f12d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/l5V7",
      "pattern": "[url:value = 'http://188.132.232.81/l5V7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858954/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f09cff2-87a5-544e-9fdd-b96923aabd43",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Zjf5",
      "pattern": "[url:value = 'http://188.132.232.81/Zjf5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858955/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42723b89-396b-53fb-90e2-c9c00ef7a6f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/f9f5",
      "pattern": "[url:value = 'http://188.132.232.81/f9f5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858956/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--752ed6f3-ec15-5a31-bd12-1dad9d72eac6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.arm",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858952/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f49529b-8bd9-5ff5-b00c-0a31890d7a5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/data_x86",
      "pattern": "[url:value = 'http://5.175.223.249/data_x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858951/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4afe85e6-4205-546e-9ef3-8b04775f1773",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/hiddenbin/Mystic.arm5",
      "pattern": "[url:value = 'http://151.245.104.193/hiddenbin/Mystic.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858950/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce5ecc54-0464-56cf-8b50-3a7532c334af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/OdB",
      "pattern": "[url:value = 'http://188.132.232.81/OdB']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858949/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab56fdca-edf1-5547-af3a-615a6a08aff4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pqycltd.hokm.casino/3ee297f5-167a-4dd9-aa63-8a4ca3468a91",
      "pattern": "[url:value = 'https://pqycltd.hokm.casino/3ee297f5-167a-4dd9-aa63-8a4ca3468a91']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:18:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858948/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c980a55-476d-5aaf-9399-234bf8a4d59a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.32.97:42939/i",
      "pattern": "[url:value = 'http://123.14.32.97:42939/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:17:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858947/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--970c0c69-3b4c-5610-844e-c904c318fd9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://f0rfdtvf.canlibahis1xbet.click/?ublib=024e1d06-9217-4d11-b12f-225abaafcc0f",
      "pattern": "[url:value = 'https://f0rfdtvf.canlibahis1xbet.click/?ublib=024e1d06-9217-4d11-b12f-225abaafcc0f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858946/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--433549e9-dc35-5d47-8540-50ea09a4adb0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://171.15.89.112:50001/bin.sh",
      "pattern": "[url:value = 'http://171.15.89.112:50001/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858945/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e0f75b1-a1e1-5e4a-8fae-6203fb330a94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.127.186.27:45331/bin.sh",
      "pattern": "[url:value = 'http://222.127.186.27:45331/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858942/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5901251-50ae-5414-8837-2283040430ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.50.204.246:56225/Mozi.a",
      "pattern": "[url:value = 'http://115.50.204.246:56225/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858943/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d785c5af-b641-5efc-81de-ae4a0df39028",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://223.123.72.212:50541/Mozi.m",
      "pattern": "[url:value = 'http://223.123.72.212:50541/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858944/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3bddbfe-747c-54b6-b8ee-bd5931b7491c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://itskuba.com/1g/4.jpg",
      "pattern": "[url:value = 'http://itskuba.com/1g/4.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858928/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--671c8458-882f-5b90-bbdb-3cfdca7eb998",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.itskuba.com/1g/2.jpg",
      "pattern": "[url:value = 'http://www.itskuba.com/1g/2.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858929/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8b7a127-d431-5f5f-aadb-32d10dd361dc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://worthknowing.us/6.jpg",
      "pattern": "[url:value = 'http://worthknowing.us/6.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858930/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93445032-809f-5f70-aaae-caf5595c13fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.itskuba.com/1g/5.jpg",
      "pattern": "[url:value = 'http://www.itskuba.com/1g/5.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858931/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f248626-6b7d-58ba-9651-350d7289f18b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://itskuba.com/1g/3.jpg",
      "pattern": "[url:value = 'http://itskuba.com/1g/3.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858932/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b2a7c56-7963-5cec-ab45-46029e77e5b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://itskuba.com/1g/1.jpg",
      "pattern": "[url:value = 'http://itskuba.com/1g/1.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858933/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fb347fb-0774-51b4-8313-4d3a172ddb45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://worthknowing.us/5.jpg",
      "pattern": "[url:value = 'http://worthknowing.us/5.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858934/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76ca6bdc-5474-59f5-a995-ff80a1443177",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://worthknowing.us/7.jpg",
      "pattern": "[url:value = 'http://worthknowing.us/7.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858935/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46496f41-5150-5836-b704-71480fda4eec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.itskuba.com/1g/3.jpg",
      "pattern": "[url:value = 'http://www.itskuba.com/1g/3.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858936/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89e22cc2-50ae-534d-8af8-c2674a07df03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://worthknowing.us/3.jpg",
      "pattern": "[url:value = 'http://worthknowing.us/3.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858937/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c45b3b07-4546-5846-a9fb-d14bf619bbaa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://itskuba.com/1g/6.jpg",
      "pattern": "[url:value = 'http://itskuba.com/1g/6.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858938/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1df686a4-79eb-5aae-b770-bf95e994544e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://worthknowing.us/4.jpg",
      "pattern": "[url:value = 'http://worthknowing.us/4.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858939/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9136939-fef7-5a04-bd94-2cd0ffdf0a58",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://worthknowing.us/2.jpg",
      "pattern": "[url:value = 'http://worthknowing.us/2.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858940/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e9e542f-1831-5a8e-80ca-7d953290199d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://itskuba.com/1g/2.jpg",
      "pattern": "[url:value = 'http://itskuba.com/1g/2.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:10:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858941/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3734f2c9-529b-5a6f-9fcb-779c56b1b8ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.151:5123/sysupdate.sh",
      "pattern": "[url:value = 'http://176.65.139.151:5123/sysupdate.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:09:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858927/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f17cafaa-0562-55e2-bcef-ac3a3c3ad897",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.148.242.35:43983/Mozi.a",
      "pattern": "[url:value = 'http://123.148.242.35:43983/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:09:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858926/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f27bac9c-7d48-545b-b5f3-0137753045a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://angel0chek.duckdns.org/Intelix.exe",
      "pattern": "[url:value = 'http://angel0chek.duckdns.org/Intelix.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:08:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858925/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83517ca0-f664-5d64-b6d2-137450445933",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.230.155:54819/bin.sh",
      "pattern": "[url:value = 'http://125.41.230.155:54819/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T05:02:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858924/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21b05e56-d4d0-5307-8477-7d19f67eb006",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.38.224:58000/i",
      "pattern": "[url:value = 'http://219.157.38.224:58000/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:50:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858923/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3194bfa2-b16c-5ef3-819f-022f407a0b1a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ageqour.hit4bet1.com/94ba5a51-207f-4c04-b5b7-eb1189584e3f",
      "pattern": "[url:value = 'https://ageqour.hit4bet1.com/94ba5a51-207f-4c04-b5b7-eb1189584e3f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858922/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aefa97e4-36c9-5210-81ee-3bab51b837ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.141.78.195:35380/i",
      "pattern": "[url:value = 'http://222.141.78.195:35380/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858921/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce5f4970-7a3b-5358-a779-56bfea19a69e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.29.164:59367/i",
      "pattern": "[url:value = 'http://182.119.29.164:59367/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:37:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858920/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d80049b2-3745-56f4-bf08-569ba45db67b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.157.38.224:58000/bin.sh",
      "pattern": "[url:value = 'http://219.157.38.224:58000/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:26:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858919/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eceee56-4827-5158-8a55-1bfd3cf4fe50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.43.225.33:40947/i",
      "pattern": "[url:value = 'http://125.43.225.33:40947/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:24:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858918/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e47ed11b-0758-55a4-a72f-7ff763eab35f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.58.3.220:52533/i",
      "pattern": "[url:value = 'http://42.58.3.220:52533/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:17:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858917/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--500e4bb3-1323-5bda-82c7-c231279c523f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.119.29.164:59367/bin.sh",
      "pattern": "[url:value = 'http://182.119.29.164:59367/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:14:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858916/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72cb04b6-762b-5e96-b697-e0f67c43f17b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vobyslb.hilo.casino/d7fe837d-dab3-4ab3-8830-2fd34192249c",
      "pattern": "[url:value = 'https://vobyslb.hilo.casino/d7fe837d-dab3-4ab3-8830-2fd34192249c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T04:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858915/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3710872-73ea-5111-aafb-c405d8bf86a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.234.235.79:45107/i",
      "pattern": "[url:value = 'http://42.234.235.79:45107/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:52:34Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858914/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2982aae6-9c41-5f24-9fa9-aeb1bb53f344",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.225.27:57403/i",
      "pattern": "[url:value = 'http://115.49.225.27:57403/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:46:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858913/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc1a66ff-f2a7-5031-bb39-37390dd7c3d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.225.27:57403/bin.sh",
      "pattern": "[url:value = 'http://115.49.225.27:57403/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858912/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92be9a93-6762-55d6-b910-12d62ff3a71e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://myofcdr.hezarfencrash.bet/a90ed365-1a8c-420b-acdc-31a1d0c047cc",
      "pattern": "[url:value = 'https://myofcdr.hezarfencrash.bet/a90ed365-1a8c-420b-acdc-31a1d0c047cc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:32:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858911/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cce31a13-6a8a-5e76-b3ff-a395865b7a34",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.148.158.112/3.tok",
      "pattern": "[url:value = 'http://107.148.158.112/3.tok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:23:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858910/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a355ba3f-adf9-528b-8192-abf31ea2533d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.249.70.46:39993/i",
      "pattern": "[url:value = 'http://112.249.70.46:39993/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858909/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f91428e9-1385-568f-8047-56fdea17425a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.124.32.56:52669/i",
      "pattern": "[url:value = 'http://182.124.32.56:52669/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:20:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858908/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd5dfc2a-8b55-520d-9d9d-08f792ffc581",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://58.255.41.28:49663/i",
      "pattern": "[url:value = 'http://58.255.41.28:49663/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:19:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858907/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d569bdce-3d12-5e91-8cb8-04ee9f60a743",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://4q4880m7.bwin90.bet/?ublib=08c9d615-a227-4114-9dd8-ef5ccf289fec",
      "pattern": "[url:value = 'https://4q4880m7.bwin90.bet/?ublib=08c9d615-a227-4114-9dd8-ef5ccf289fec']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:13:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858906/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d797f720-9afa-5528-a989-f5d3c4f6cded",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://85.100.205.208:55271/i",
      "pattern": "[url:value = 'http://85.100.205.208:55271/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:08:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858905/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2772bbf-e8fe-50b7-816f-5e4700ce0411",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://3p1x6btm.1xbet90.bet/?ublib=884a8c24-84c7-42e3-b95f-b1826d174b7e",
      "pattern": "[url:value = 'https://3p1x6btm.1xbet90.bet/?ublib=884a8c24-84c7-42e3-b95f-b1826d174b7e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T03:03:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858904/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0afebc74-f589-5d1f-ae91-a2c0f8d5327d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://youykxp.herz-frank.com/1ec2d480-9439-4afd-a57a-39460464022e",
      "pattern": "[url:value = 'https://youykxp.herz-frank.com/1ec2d480-9439-4afd-a57a-39460464022e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:57:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858903/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9d1560d-b324-5dcb-8632-009e8937e4c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.255.30.244:36949/i",
      "pattern": "[url:value = 'http://72.255.30.244:36949/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:55:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858902/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a269bb6-dbdd-54e5-abfd-bae7424e5660",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.249.70.46:39993/bin.sh",
      "pattern": "[url:value = 'http://112.249.70.46:39993/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858901/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ee038c9-2b78-5284-bf08-fa3979301f6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://85.100.205.208:55271/bin.sh",
      "pattern": "[url:value = 'http://85.100.205.208:55271/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:47:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858900/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01443e96-25e7-58db-af37-c45f6a360f0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.231.182.162:57397/i",
      "pattern": "[url:value = 'http://42.231.182.162:57397/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:46:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858899/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9bf01f6-a7fc-57eb-872d-333eee963739",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.93.217:47482/i",
      "pattern": "[url:value = 'http://110.36.93.217:47482/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:42:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858898/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98dace35-99f1-59f3-a619-0074074ed6a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.255.30.244:36949/bin.sh",
      "pattern": "[url:value = 'http://72.255.30.244:36949/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:23:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858897/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9df11f6-8a93-582d-8516-ce3e112e43d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://emwzmsp.hazaratbetapp.com/59b087c9-e45a-4647-8afb-dd018520c531",
      "pattern": "[url:value = 'https://emwzmsp.hazaratbetapp.com/59b087c9-e45a-4647-8afb-dd018520c531']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:22:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858896/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da63013d-e4ce-5a32-a4fc-00dadc0007b7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.244.67:39109/i",
      "pattern": "[url:value = 'http://110.39.244.67:39109/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:17:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858895/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7076d695-1a5a-53f9-a5a9-a3b2eb889a4d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://160.30.142.2:59412/i",
      "pattern": "[url:value = 'http://160.30.142.2:59412/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T02:10:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858894/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f591d60-3bd3-57d8-b963-e91e33adfef7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://160.30.142.2:59412/bin.sh",
      "pattern": "[url:value = 'http://160.30.142.2:59412/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:55:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858893/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15f0113d-7e23-5d13-9a5d-934664fdcf94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gxtryif.hattrickbetapp.com/df01dac2-ac14-4ee5-a827-e595af75f3ea",
      "pattern": "[url:value = 'https://gxtryif.hattrickbetapp.com/df01dac2-ac14-4ee5-a827-e595af75f3ea']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:50:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858892/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05dd433c-409c-5e9b-9f31-43e7b123fd19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.158.137:36439/i",
      "pattern": "[url:value = 'http://61.52.158.137:36439/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:36:32Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858891/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ede6849a-83a4-51af-9c69-911d5886e371",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://154.242.18.65:50270/i",
      "pattern": "[url:value = 'http://154.242.18.65:50270/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:25:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858890/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84f9b3c4-1490-5acc-bbcc-15e9e9208ff2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.147.206:59280/i",
      "pattern": "[url:value = 'http://61.52.147.206:59280/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:18:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858889/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87c1f82b-fd29-5eda-9881-bb7c7093e7e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gqjz709j.bordoo.bet/?ublib=951b3f1b-9a30-41ab-84f6-ac1c4530e359",
      "pattern": "[url:value = 'https://gqjz709j.bordoo.bet/?ublib=951b3f1b-9a30-41ab-84f6-ac1c4530e359']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858888/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1f40c6d-4c7b-5153-8280-6b8be1002a2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hwfbwco.hamvarzesh90.com/f8fc9499-e5bd-4d8d-b470-ea338f1776c5",
      "pattern": "[url:value = 'https://hwfbwco.hamvarzesh90.com/f8fc9499-e5bd-4d8d-b470-ea338f1776c5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858887/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c3d748e-4feb-5148-89cc-bd0309918532",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://60.211.45.225:38494/i",
      "pattern": "[url:value = 'http://60.211.45.225:38494/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:09:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858886/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc17c538-784a-511f-aaa2-1a4339ba772a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qcwvat.1kickbet90.com/2b7803ae-d578-4460-a876-fe47de88c8a1",
      "pattern": "[url:value = 'https://qcwvat.1kickbet90.com/2b7803ae-d578-4460-a876-fe47de88c8a1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:09:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858885/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69ed6183-54d0-5579-bc77-04cbc86b050d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.158.137:36439/bin.sh",
      "pattern": "[url:value = 'http://61.52.158.137:36439/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:07:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858884/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43bf7912-8f82-5925-993c-86366946217f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qkqxbb.doobixbet.bet/e1ea726f-c0de-4994-bad8-8015e01514c2",
      "pattern": "[url:value = 'https://qkqxbb.doobixbet.bet/e1ea726f-c0de-4994-bad8-8015e01514c2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:02:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858883/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a935e1ef-1736-52c7-ad4b-f692ba0b37e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.67.189:52431/i",
      "pattern": "[url:value = 'http://125.45.67.189:52431/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T01:01:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858882/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6629d5e5-3f90-51da-8e34-7f81edb08cfd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.156.22.2:32963/bin.sh",
      "pattern": "[url:value = 'http://219.156.22.2:32963/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:59:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858881/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a7ac8e2-5f47-560d-96a2-aa183b2d55a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.147.206:59280/bin.sh",
      "pattern": "[url:value = 'http://61.52.147.206:59280/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:53:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858880/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97b16ed9-77e9-53ca-a7b7-b4abe2aa76f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.132.117:58676/i",
      "pattern": "[url:value = 'http://115.58.132.117:58676/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:52:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858879/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--270e9304-ca82-55b1-8f2f-10369279dfc2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.151.82:36077/bin.sh",
      "pattern": "[url:value = 'http://182.117.151.82:36077/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:48:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858878/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac45df5b-05b9-57e0-9587-cf02a8d6b497",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zyhhuar.golfbetpro.com/565345d4-199f-44b6-9506-72f526f56e6b",
      "pattern": "[url:value = 'https://zyhhuar.golfbetpro.com/565345d4-199f-44b6-9506-72f526f56e6b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:34:03Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858877/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aeff7d94-47d4-58a3-bc35-f439dc24f8bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.91.236:52594/i",
      "pattern": "[url:value = 'http://61.53.91.236:52594/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858876/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbaa059f-d3e2-5102-b64d-67e947eb44e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://85.12.237.201:53945/i",
      "pattern": "[url:value = 'http://85.12.237.201:53945/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:30:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858875/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73c1fa50-f10d-57a1-b31e-75567b6deac1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dybkohl.goldenroulette.bet/45a2b379-a2d0-48ab-b5a9-0ae836ca60c4",
      "pattern": "[url:value = 'https://dybkohl.goldenroulette.bet/45a2b379-a2d0-48ab-b5a9-0ae836ca60c4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:27:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858874/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcfab204-3473-588f-bf87-be07644886ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.44:47941/i",
      "pattern": "[url:value = 'http://46.236.65.44:47941/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:25:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858873/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62b1d566-507a-5472-9ac8-b399fa0e7491",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.229.178.69:50774/i",
      "pattern": "[url:value = 'http://113.229.178.69:50774/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858872/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99d4c446-785c-5384-8435-ef76ff67253f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ttowige.goldenroulette.bet/3aa00428-3f0f-4aa6-bb23-4799729448d6",
      "pattern": "[url:value = 'https://ttowige.goldenroulette.bet/3aa00428-3f0f-4aa6-bb23-4799729448d6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:22:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858871/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--007bdb48-8ac8-56f7-befc-3d555ee431a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.39.221:56750/bin.sh",
      "pattern": "[url:value = 'http://125.40.39.221:56750/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:20:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858870/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af806e0b-d2ca-5847-a7d2-d9ac9f4737c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.67.189:52431/bin.sh",
      "pattern": "[url:value = 'http://125.45.67.189:52431/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-05T00:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858869/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ea3509d-9968-5628-8496-4be90ed41655",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.44:47941/bin.sh",
      "pattern": "[url:value = 'http://46.236.65.44:47941/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:58:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858868/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81808cf6-e63b-50a2-ab08-b6aca229b1c2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.229.178.69:50774/bin.sh",
      "pattern": "[url:value = 'http://113.229.178.69:50774/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:54:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858867/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8316570a-5302-5941-8c9d-d130cf8f7aad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sqzzsnr.gardune.bet/6aad78a9-38ef-429a-af0a-05e0bf1e91e0",
      "pattern": "[url:value = 'https://sqzzsnr.gardune.bet/6aad78a9-38ef-429a-af0a-05e0bf1e91e0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:45:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858866/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f83bd183-fd2f-5808-9582-e9619ccf91fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.233.144.58:60831/i",
      "pattern": "[url:value = 'http://151.233.144.58:60831/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858865/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54daefca-4d07-5096-a5de-811ce5478cea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.50.205.116:58583/i",
      "pattern": "[url:value = 'http://115.50.205.116:58583/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:18:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858864/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee4547b5-22ad-5d51-b370-656fdbebeba9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.15.18:36471/bin.sh",
      "pattern": "[url:value = 'http://110.36.15.18:36471/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858863/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--679332d0-1dfe-5a0b-b5f3-43f0a7d6f3ae",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.151.124.34:56539/bin.sh",
      "pattern": "[url:value = 'http://175.151.124.34:56539/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:15:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858862/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25df13b8-d36e-5cd1-a1db-0c6f0c643da7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nienzsq.funbet24.bet/e429f601-18da-4107-8310-96ac56b1a83e",
      "pattern": "[url:value = 'https://nienzsq.funbet24.bet/e429f601-18da-4107-8310-96ac56b1a83e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:11:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858861/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb756a09-a00b-5ba6-8864-e5eff5282e7f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jzl98lpw.betbuilder.promo/?ublib=4fc935b7-f7dc-4205-8dd8-3dfe3786f432",
      "pattern": "[url:value = 'https://jzl98lpw.betbuilder.promo/?ublib=4fc935b7-f7dc-4205-8dd8-3dfe3786f432']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:11:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858860/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7668617f-b7f4-5445-84c6-96a7ac077f75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.60.224.5:52760/i",
      "pattern": "[url:value = 'http://115.60.224.5:52760/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:10:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858859/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89ee0a69-6815-56e5-85c1-3edba093879b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.60.224.5:52760/bin.sh",
      "pattern": "[url:value = 'http://115.60.224.5:52760/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T23:02:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858858/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffcce060-cc08-5ed8-aad3-e7e023ab1612",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.50.205.116:58583/bin.sh",
      "pattern": "[url:value = 'http://115.50.205.116:58583/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:52:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858857/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d888407f-4c92-5444-a968-6d082dbc7e5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.192.84:49978/i",
      "pattern": "[url:value = 'http://61.52.192.84:49978/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858856/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b28d0e1-173b-5b6a-8135-65525eee6e29",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://183.149.51.138:55778/i",
      "pattern": "[url:value = 'http://183.149.51.138:55778/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:44:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858855/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f94c4d0-b997-5839-99e6-b0579f272fc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.161:39405/i",
      "pattern": "[url:value = 'http://46.236.65.161:39405/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858854/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc5cf94e-0178-51c8-993f-cc04b170e44d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://iddmpon.football2026.world/0eaba1ad-aecd-4d8d-b3e9-53cc8cca6b9b",
      "pattern": "[url:value = 'https://iddmpon.football2026.world/0eaba1ad-aecd-4d8d-b3e9-53cc8cca6b9b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:37:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858853/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86a3e7b5-3cd8-5ab1-b2c4-1c43bee9ecc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.192.84:49978/bin.sh",
      "pattern": "[url:value = 'http://61.52.192.84:49978/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:36:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858852/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--073faee1-279b-5397-bb9b-12124a403f5d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hityspe.footbalbet.com/5569ff72-a1fa-4618-9292-b4f8e18d13a0",
      "pattern": "[url:value = 'https://hityspe.footbalbet.com/5569ff72-a1fa-4618-9292-b4f8e18d13a0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:34:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858851/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adb22559-1815-599d-931f-81a998ab20c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.191.102:41196/i",
      "pattern": "[url:value = 'http://222.137.191.102:41196/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:31:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858850/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--876289bf-1fec-53b6-9b67-c7046331be4d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.191.102:41196/bin.sh",
      "pattern": "[url:value = 'http://222.137.191.102:41196/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:30:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858849/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d18831f-964c-5b1a-98da-7fec80dae828",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.161:39405/bin.sh",
      "pattern": "[url:value = 'http://46.236.65.161:39405/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:27:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858848/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b10c2268-c19d-55b9-be31-2bcdbfc65e6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.233.144.58:60831/bin.sh",
      "pattern": "[url:value = 'http://151.233.144.58:60831/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:25:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858847/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39dd0945-19d5-5bed-972a-6b3761f608d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://183.149.51.138:55778/bin.sh",
      "pattern": "[url:value = 'http://183.149.51.138:55778/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:21:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858846/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d10a6f08-738e-5409-ae25-eed77a8f601b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.31.240:36211/i",
      "pattern": "[url:value = 'http://182.117.31.240:36211/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:13:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858845/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--414d899b-e6f1-5346-9072-3581b6b2f250",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.83.19:52758/i",
      "pattern": "[url:value = 'http://219.155.83.19:52758/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858844/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a4f2243-2a27-5941-90df-612f35d9445b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.83.202:37339/i",
      "pattern": "[url:value = 'http://125.40.83.202:37339/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:02:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858843/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea880bc3-7432-53bb-90d8-3eb30e09f54e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ne6nzi7r.1shart.bet/?ublib=ab0b8ce8-9e1f-44ae-99ff-a8717c3b1b9b",
      "pattern": "[url:value = 'https://ne6nzi7r.1shart.bet/?ublib=ab0b8ce8-9e1f-44ae-99ff-a8717c3b1b9b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T22:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858842/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da9b199d-6be6-5eef-bec8-801b0161a463",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://thnivbk.footbal90bet.app/9dc9cad0-9346-4e81-8f81-be96d7e64b48",
      "pattern": "[url:value = 'https://thnivbk.footbal90bet.app/9dc9cad0-9346-4e81-8f81-be96d7e64b48']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:58:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858841/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--258b7c6c-0a3d-563a-97f2-35bf788b87d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.31.240:36211/bin.sh",
      "pattern": "[url:value = 'http://182.117.31.240:36211/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:49:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858840/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16744469-1208-58eb-8153-6cd65fe8d0a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.177.108.48:35970/bin.sh",
      "pattern": "[url:value = 'http://42.177.108.48:35970/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:44:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858839/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d9a3b5e-c614-55dc-bf0e-2ea5acb8d4fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.83.19:52758/bin.sh",
      "pattern": "[url:value = 'http://219.155.83.19:52758/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:43:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858838/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43c45bd5-e96f-5a03-9b1b-cc4ad55768f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.48.27.89:34153/i",
      "pattern": "[url:value = 'http://115.48.27.89:34153/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:37:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858837/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb5c9fa6-5de0-5737-8522-d4045ad5a2ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.83.202:37339/bin.sh",
      "pattern": "[url:value = 'http://125.40.83.202:37339/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:37:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858836/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eb82537-5085-5a55-9eda-a2d7a28eca21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mhepihh.footbal90bet.app/80efc71d-72cd-44a7-a1d8-acc40663f4f0",
      "pattern": "[url:value = 'https://mhepihh.footbal90bet.app/80efc71d-72cd-44a7-a1d8-acc40663f4f0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:24:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858835/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47ef6c7b-8653-5105-b609-2a5fc44fb742",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.140.22:37206/i",
      "pattern": "[url:value = 'http://123.4.140.22:37206/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:14:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858834/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5056620-592a-5083-a3b4-94fc89984cd1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://7aaxg4kb.betbatis.com/?ublib=7ce4b7ee-3b86-4990-9527-dadeed8e276d",
      "pattern": "[url:value = 'https://7aaxg4kb.betbatis.com/?ublib=7ce4b7ee-3b86-4990-9527-dadeed8e276d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T21:11:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858833/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00f5a235-08c9-5dda-99e6-15da1a5e1d8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.53.135.10:56771/i",
      "pattern": "[url:value = 'http://42.53.135.10:56771/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:59:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858832/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2e407dd-7342-5653-9ca8-af323588ae04",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.4.140.22:37206/bin.sh",
      "pattern": "[url:value = 'http://123.4.140.22:37206/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:58:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858831/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17620931-1e9b-5218-9266-13a09afc260a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.232.52:44328/i",
      "pattern": "[url:value = 'http://42.232.232.52:44328/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858830/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6e6d820-088f-5e97-a554-8cf0821d214a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://syjgiug.fibi-ireland.com/dda41b26-d1c9-4b49-be09-fe63e1e21bc2",
      "pattern": "[url:value = 'https://syjgiug.fibi-ireland.com/dda41b26-d1c9-4b49-be09-fe63e1e21bc2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:49:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858829/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--850266d7-0441-5e51-bd74-1e68427eb461",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.161.118:44269/i",
      "pattern": "[url:value = 'http://42.235.161.118:44269/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:21:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858828/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--733263a6-eba3-5287-9bab-2ebc66013e33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.123.197.138:54031/i",
      "pattern": "[url:value = 'http://182.123.197.138:54031/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:18:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858827/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e8c1dd1-1ffe-5c36-81e1-a8c941a426d7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gbueeqa.eurothrombosis2018.com/79fbc845-b116-4d29-89b6-b758a6b7e38e",
      "pattern": "[url:value = 'https://gbueeqa.eurothrombosis2018.com/79fbc845-b116-4d29-89b6-b758a6b7e38e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:13:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858826/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d56d77e4-6e83-5d67-9b96-74f78f8c4024",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://178.16.54.109/n.exe",
      "pattern": "[url:value = 'http://178.16.54.109/n.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858824/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48e0788c-f2cb-5402-affc-73b5d9e287ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://178.16.54.109/x.exe",
      "pattern": "[url:value = 'http://178.16.54.109/x.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858825/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e5b102-3157-5161-857b-1e9d0446b9be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bfdibp.dahdahtoys.com/a4d13b32-41cb-4dac-9f71-9662bb1a7626",
      "pattern": "[url:value = 'https://bfdibp.dahdahtoys.com/a4d13b32-41cb-4dac-9f71-9662bb1a7626']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T20:01:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858823/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6a10561-c302-5c00-8bd8-489d1d0bfeb3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.161.118:44269/bin.sh",
      "pattern": "[url:value = 'http://42.235.161.118:44269/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:58:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858822/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9951d60-6e32-5b00-aa3c-214070452ce8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.123.197.138:54031/bin.sh",
      "pattern": "[url:value = 'http://182.123.197.138:54031/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:52:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858821/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c896201f-b105-5ccf-b3c3-dcb5f2099dd6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.92.74:47030/i",
      "pattern": "[url:value = 'http://182.126.92.74:47030/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:44:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858820/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f332282b-9038-5559-b327-deb55d6d9e86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://kaizen22.xyz/bins/kaizen.arm7",
      "pattern": "[url:value = 'http://kaizen22.xyz/bins/kaizen.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:42:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858819/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03dd462b-d7da-519a-ab59-04a15a6b63c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.152.248:32812/i",
      "pattern": "[url:value = 'http://182.121.152.248:32812/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858817/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ab32523-da9f-5ede-99fa-21b6f64d6015",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.79.141.16:35636/i",
      "pattern": "[url:value = 'http://39.79.141.16:35636/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858818/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14feb17c-ae76-56ed-95d4-55eabfe33da5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://5ay2qa01.electriccrash.bet/?ublib=ade8d41e-e143-4b16-b708-c8d8badea2c4",
      "pattern": "[url:value = 'https://5ay2qa01.electriccrash.bet/?ublib=ade8d41e-e143-4b16-b708-c8d8badea2c4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:38:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858816/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f540a2a1-dcc1-5b19-9a47-f596983d0a47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kihjmjx.enobahis.co/ca36e73d-15c5-4683-a676-327642efb378",
      "pattern": "[url:value = 'https://kihjmjx.enobahis.co/ca36e73d-15c5-4683-a676-327642efb378']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858815/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a53df4a-9780-55d4-bc3e-ad6891ff397d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.92.74:47030/bin.sh",
      "pattern": "[url:value = 'http://182.126.92.74:47030/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:32:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858814/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fef0fdc0-58b0-50db-bfb1-db91c1f32adc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.217.155:41847/i",
      "pattern": "[url:value = 'http://119.179.217.155:41847/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:23:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858813/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1abd649-f45c-5976-b352-286653cf6ddb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.177.28.149:59488/i",
      "pattern": "[url:value = 'http://203.177.28.149:59488/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858812/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7956a534-c89e-55d6-b898-0681f42bf137",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://6vk8lpd5.betball90.casino/?ublib=2b3bc6aa-f509-4b4e-853a-ebca1ab50d40",
      "pattern": "[url:value = 'https://6vk8lpd5.betball90.casino/?ublib=2b3bc6aa-f509-4b4e-853a-ebca1ab50d40']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T19:10:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858811/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--217aa99b-a51d-54d3-a91f-e8e0b975c2ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wvvbpwt.enfejar.game/79b5e3c6-e8f5-4efe-9c09-71e232e8baeb",
      "pattern": "[url:value = 'https://wvvbpwt.enfejar.game/79b5e3c6-e8f5-4efe-9c09-71e232e8baeb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:59:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858810/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e81ea81-9b3f-5553-a07b-4977bb7b4d7c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.203.220:51681/i",
      "pattern": "[url:value = 'http://42.227.203.220:51681/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:57:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858809/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f48bc0c1-83e8-5e56-a63d-1f9bf894e113",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.219.172.177:48245/i",
      "pattern": "[url:value = 'http://27.219.172.177:48245/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:56:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858808/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0461d86d-62e3-5b99-926b-1a1a69aab024",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.238.243:54154/i",
      "pattern": "[url:value = 'http://42.232.238.243:54154/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:52:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858807/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83d7fcda-0dd7-5383-b29d-3dbab6a29a82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.226.161.90:50197/i",
      "pattern": "[url:value = 'http://38.226.161.90:50197/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:51:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858806/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--838c2102-86c9-5174-bbbe-406a4d454d4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.7.204:43170/i",
      "pattern": "[url:value = 'http://115.55.7.204:43170/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:37:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858805/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99e9f305-b95e-5659-afae-d9c92a21d99f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.123.199.164:59436/bin.sh",
      "pattern": "[url:value = 'http://182.123.199.164:59436/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858804/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9f15718-100a-5d48-b103-bca50f8d7956",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://dralexandrecoura.com.br/ups/cuh.vbs",
      "pattern": "[url:value = 'https://dralexandrecoura.com.br/ups/cuh.vbs']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:36:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858803/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe107a84-f8a6-5778-af12-981a3a90c6b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.203.220:51681/bin.sh",
      "pattern": "[url:value = 'http://42.227.203.220:51681/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:35:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858802/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--468c139d-2615-56be-be50-f126f137a263",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.219.172.177:48245/bin.sh",
      "pattern": "[url:value = 'http://27.219.172.177:48245/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:34:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858801/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68f3acea-ab3a-5997-8ada-c7172d71c51d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.202.198:46595/i",
      "pattern": "[url:value = 'http://219.155.202.198:46595/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858800/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e700f37-b0fa-5ed5-acda-bb61b2508ce9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://38.226.161.90:50197/bin.sh",
      "pattern": "[url:value = 'http://38.226.161.90:50197/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:26:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858799/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98879f7c-436b-5fcb-a809-0f09cc756074",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://bubblekip.info/",
      "pattern": "[url:value = 'http://bubblekip.info/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:24:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858798/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64ef3ab6-e491-5879-a0b0-0650179adfa6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jswnqpn.enfejarbazii.bet/edcfc2a2-82bd-490a-97d8-f35c94a4a599",
      "pattern": "[url:value = 'https://jswnqpn.enfejarbazii.bet/edcfc2a2-82bd-490a-97d8-f35c94a4a599']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:23:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858797/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab1bdeb2-e49f-52c1-a68b-ca14de2d87e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://xzxni-135-134-92-71.run.pinggy-free.link/run.sh",
      "pattern": "[url:value = 'http://xzxni-135-134-92-71.run.pinggy-free.link/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:18:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858796/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05e4c804-65e9-5bef-b70f-65796e4820f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.177.28.149:59488/bin.sh",
      "pattern": "[url:value = 'http://203.177.28.149:59488/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:17:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858795/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae02ba59-9b0b-5147-b2e1-5e59e78d8b1f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://science4u.co.in/3.exe",
      "pattern": "[url:value = 'https://science4u.co.in/3.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:12:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858794/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ca24ca7-c83e-5c42-b121-23603087787c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://science4u.co.in/144.exe",
      "pattern": "[url:value = 'https://science4u.co.in/144.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:12:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858793/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--373d80e1-da70-5b62-aa37-22242c52eea5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://iwd21.icu/mim/inkopph.txt",
      "pattern": "[url:value = 'https://iwd21.icu/mim/inkopph.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:09:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858792/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9620e53a-5693-5388-bd4c-6bd6dc817e8b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.238.243:54154/bin.sh",
      "pattern": "[url:value = 'http://42.232.238.243:54154/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:02:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858791/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5243062-72a1-5ab4-9976-5a4368301f9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://viceete.lol/o",
      "pattern": "[url:value = 'http://viceete.lol/o']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:00:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858790/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e5c0bc9-c1f1-506b-85bd-38c7aaa38d30",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_1232af70460f33e6.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_1232af70460f33e6.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858787/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97a952a7-2169-5aa4-8a51-60ef56c5ffc3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_678a638ac5fc633b.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_678a638ac5fc633b.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858788/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d8220ff-eaa7-53bf-a535-93a2f687e0b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_b6b65062e1a97e1e.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_b6b65062e1a97e1e.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T18:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858789/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aadcd96-730b-5d97-a529-b7c7dc825c63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.163.52.89:48861/i",
      "pattern": "[url:value = 'http://124.163.52.89:48861/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858786/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd33d224-2769-57d4-b906-f181e14e300a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/8560243644/9PYorAz.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/8560243644/9PYorAz.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858785/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bff95635-a29e-5c84-acf4-af6a3a98bc70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ldkrhyp.emshab.bet/f6e8b42a-a64d-4966-a515-fea433a72b8f",
      "pattern": "[url:value = 'https://ldkrhyp.emshab.bet/f6e8b42a-a64d-4966-a515-fea433a72b8f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:52:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858784/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff959a99-f0e6-52cd-a1c9-25c6cefb9e0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.141.53:34850/i",
      "pattern": "[url:value = 'http://112.248.141.53:34850/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858783/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae59acce-112d-5918-a45f-7d808f919ccd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://124.163.52.89:48861/bin.sh",
      "pattern": "[url:value = 'http://124.163.52.89:48861/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:25:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858782/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca3097e0-d0ba-576c-b70d-f23cf5b1716f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.241.46:44958/i",
      "pattern": "[url:value = 'http://221.15.241.46:44958/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:25:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858781/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b163343-7740-59fd-b19b-272100c2bb3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ex7gv4y7.bet90land.com/?ublib=b0788a7a-40cd-49d0-80e5-f65772ad49e2",
      "pattern": "[url:value = 'https://ex7gv4y7.bet90land.com/?ublib=b0788a7a-40cd-49d0-80e5-f65772ad49e2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:25:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858780/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d724374b-3e82-58ad-a812-2ea2303bc9a3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.55.9.225:41209/i",
      "pattern": "[url:value = 'http://115.55.9.225:41209/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:22:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858779/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b9f25f0-210a-58d9-9bc9-fe4063d2d70a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://atnvjyj.emroze.bet/af0df9e4-a648-4f16-9435-8e337d042bb2",
      "pattern": "[url:value = 'https://atnvjyj.emroze.bet/af0df9e4-a648-4f16-9435-8e337d042bb2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858778/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0f6c023-8c51-5fad-8b1c-ec60f32236ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.241.46:44958/bin.sh",
      "pattern": "[url:value = 'http://221.15.241.46:44958/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T17:00:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858777/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b345022-be20-5fa1-9bf7-172f80f02429",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.81.84.187:43228/i",
      "pattern": "[url:value = 'http://36.81.84.187:43228/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:51:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858776/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77fe71af-efd0-5355-b7c4-2deac7d718df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tpvggeb.bordino.bet/1df8503c-b180-4603-ba92-7d6c3ac6c7a9",
      "pattern": "[url:value = 'https://tpvggeb.bordino.bet/1df8503c-b180-4603-ba92-7d6c3ac6c7a9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:51:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858775/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e139d1db-4882-597a-8b6c-a71d30781640",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/bins/arm4",
      "pattern": "[url:value = 'http://5.83.134.26/bins/arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858770/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46237edb-6d03-5a52-8063-7256c0b9f1db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/mips",
      "pattern": "[url:value = 'http://5.83.134.26/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858771/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07dd0aa3-b7f5-509d-a511-20720e230a3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/mpsl",
      "pattern": "[url:value = 'http://5.83.134.26/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858772/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff6a9fdf-b286-5e21-97e1-dcac37e7e03c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/bins/spc",
      "pattern": "[url:value = 'http://5.83.134.26/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858773/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3021d013-ebdd-5742-877e-614b7489ac83",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/arm5",
      "pattern": "[url:value = 'http://5.83.134.26/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:38:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858774/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3341876f-ae4d-5fbb-a3f8-d029071e4b35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.83.134.26/bins/x86_64",
      "pattern": "[url:value = 'http://5.83.134.26/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:38:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858769/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b902725e-96a9-51a3-a9f9-3daa25c592a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.sparc",
      "pattern": "[url:value = 'http://176.65.139.121/iran.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:27:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858764/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92020e63-f9b7-54a7-b7c5-aacb385f8fe8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.mips",
      "pattern": "[url:value = 'http://176.65.139.121/iran.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:27:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858765/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b97f94c-72c9-57d7-8911-9cab4a918d9c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.i486",
      "pattern": "[url:value = 'http://176.65.139.121/iran.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:27:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858766/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e2b5ed8-69c8-593e-ac93-167d80479d16",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.sh4",
      "pattern": "[url:value = 'http://176.65.139.121/iran.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:27:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858767/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c3dad95-a982-5a6d-a020-e006551546a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.armv7l",
      "pattern": "[url:value = 'http://176.65.139.121/iran.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:27:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858768/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73f27d1c-377b-5716-85b6-33e0b889c203",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.m68k",
      "pattern": "[url:value = 'http://176.65.139.121/iran.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858763/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12edb93e-137c-5486-8c87-411e23b1c23c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.x86_64",
      "pattern": "[url:value = 'http://176.65.139.121/iran.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858759/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab1de52d-d032-530d-8d20-c40e15f276cd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.aarch64",
      "pattern": "[url:value = 'http://176.65.139.121/iran.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858760/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--732e630d-0349-5fdb-9d2d-e991fcac748b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.mipsrouter",
      "pattern": "[url:value = 'http://176.65.139.121/iran.mipsrouter']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858761/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d828c53d-c620-5874-9bc8-7bb673d77a81",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.armv4l",
      "pattern": "[url:value = 'http://176.65.139.121/iran.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858762/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aaf1e4e-d047-5fd6-99b5-633cc4c59d45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.arc",
      "pattern": "[url:value = 'http://176.65.139.121/iran.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858753/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d8b23df-605b-5017-bc64-e7f767763b35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.armv5l",
      "pattern": "[url:value = 'http://176.65.139.121/iran.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858754/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df22a4ac-95f2-5985-b6e0-a7c8e2fdb694",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/cat.sh",
      "pattern": "[url:value = 'http://176.65.139.121/cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858755/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19b0c231-ea3a-5f79-9d46-a7ef39e3186a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.armv6l",
      "pattern": "[url:value = 'http://176.65.139.121/iran.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858756/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a546278-9aa0-5e7e-956a-63c985982b2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.mipsel",
      "pattern": "[url:value = 'http://176.65.139.121/iran.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858757/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4970b475-96ca-5c4c-b7c3-90df52e93c06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.121/iran.powerpc",
      "pattern": "[url:value = 'http://176.65.139.121/iran.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:26:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858758/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe744d6c-83e4-56bb-9471-c78cd868fa15",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://amcbvlw.bordbet.casino/03e33117-8fbf-4672-8632-88b6ff1f2f44",
      "pattern": "[url:value = 'https://amcbvlw.bordbet.casino/03e33117-8fbf-4672-8632-88b6ff1f2f44']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:20:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858752/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74dbbb5f-816a-509e-95b8-81ef217f3e38",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.88.59:54697/i",
      "pattern": "[url:value = 'http://123.8.88.59:54697/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858751/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99f32fb3-b28c-51a2-96bc-99c6c797d9ed",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.151.164:57433/i",
      "pattern": "[url:value = 'http://115.58.151.164:57433/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:09:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858750/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce36ee06-253f-505b-ad68-49617a081b4e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.156.130:59062/i",
      "pattern": "[url:value = 'http://125.45.156.130:59062/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:02:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858749/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82f8a6c6-02da-53b9-b198-e3d622f7374f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.8.88.59:54697/bin.sh",
      "pattern": "[url:value = 'http://123.8.88.59:54697/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T16:02:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858748/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b47c8577-06a1-5213-b28c-2cc7cba38e28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.126.151:42763/i",
      "pattern": "[url:value = 'http://115.58.126.151:42763/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858747/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0771517-2645-52c4-b945-2c18ddafd970",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://142.90.8.60:36469/i",
      "pattern": "[url:value = 'http://142.90.8.60:36469/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:52:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858746/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f606689-bce8-55e6-ac4e-d0872939a368",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.188.165:58903/i",
      "pattern": "[url:value = 'http://221.15.188.165:58903/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:49:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858745/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c8797e-9ae4-59eb-ab32-adef03c80859",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.126.151:42763/bin.sh",
      "pattern": "[url:value = 'http://115.58.126.151:42763/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:47:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858744/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44658b29-dc18-50a1-8077-4a20ce002be9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.67.212.225:56697/i",
      "pattern": "[url:value = 'http://39.67.212.225:56697/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:44:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858743/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92785feb-8b1c-5c99-9020-022102a0795a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://fzgktgh.bord90.bet/bb507668-f86f-4d75-a682-1e1af73322eb",
      "pattern": "[url:value = 'https://fzgktgh.bord90.bet/bb507668-f86f-4d75-a682-1e1af73322eb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:41:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858742/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42350168-2fef-5360-8088-2194da84e5fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://142.93.255.1/pty3",
      "pattern": "[url:value = 'http://142.93.255.1/pty3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:40:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858739/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f063c44e-bf2e-5df0-a1d0-6bf0c08ce58d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://142.93.255.1/pty4",
      "pattern": "[url:value = 'http://142.93.255.1/pty4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:40:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858740/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--056e2f8b-5a66-5824-8f93-52a038fe04e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://142.93.255.1/pty10",
      "pattern": "[url:value = 'http://142.93.255.1/pty10']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:40:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858741/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0c3e9b8-685a-5115-bcff-9dc0184411a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.67.212.225:56697/bin.sh",
      "pattern": "[url:value = 'http://39.67.212.225:56697/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:30:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858738/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb5d9559-8053-59e1-a0a8-855eec434960",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.200.53:60030/bin.sh",
      "pattern": "[url:value = 'http://219.155.200.53:60030/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:30:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858736/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aced0500-c991-59c0-b573-9bff832dd2f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.98.224:35285/i",
      "pattern": "[url:value = 'http://123.14.98.224:35285/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:30:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858737/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d41e041-1cc4-5c81-b035-b4855425f770",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.98.224:35285/bin.sh",
      "pattern": "[url:value = 'http://123.14.98.224:35285/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:25:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858735/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bdbaad0-07f9-5c44-bd67-060dee846ce0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.188.165:58903/bin.sh",
      "pattern": "[url:value = 'http://221.15.188.165:58903/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:24:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858734/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25de1e09-b46e-58fc-80ff-e293837ff519",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://142.90.8.60:36469/bin.sh",
      "pattern": "[url:value = 'http://142.90.8.60:36469/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:23:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858733/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b335e633-d1d4-51a7-9c5a-cd19298549db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bofcv8ir.bet90boro.com/?ublib=d8db853d-3c1c-4eeb-80b9-c0eab866ae37",
      "pattern": "[url:value = 'https://bofcv8ir.bet90boro.com/?ublib=d8db853d-3c1c-4eeb-80b9-c0eab866ae37']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:23:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858732/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a1668f1-b9a8-582d-b19c-7a23fa158c48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.109.24:46385/i",
      "pattern": "[url:value = 'http://112.248.109.24:46385/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:16:38Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858731/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab3c83d3-6f99-5667-b98e-a58fb0b46d6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drckscr.bizbetslot.net/30885085-cd04-482b-915b-8e9b2668f8bb",
      "pattern": "[url:value = 'https://drckscr.bizbetslot.net/30885085-cd04-482b-915b-8e9b2668f8bb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:09:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858730/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4bd130c-a5fb-519d-87a0-f7e124aa5419",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://confirmyouarehuman.top/o",
      "pattern": "[url:value = 'https://confirmyouarehuman.top/o']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:03:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858729/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5121b765-b621-53dd-8acb-8e56682cfc62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ltncnvk.bingobet90.com/dd0e4c98-8d22-4065-9b7f-f6dfc0b91b16",
      "pattern": "[url:value = 'https://ltncnvk.bingobet90.com/dd0e4c98-8d22-4065-9b7f-f6dfc0b91b16']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:01:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858728/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd961074-ce67-5565-b4e7-1fedbf7e6a93",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://yertdw.3sefr3.ir/f8b5f70c-843d-412a-8a86-93ff2f423d0d",
      "pattern": "[url:value = 'https://yertdw.3sefr3.ir/f8b5f70c-843d-412a-8a86-93ff2f423d0d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T15:00:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858727/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--128fbcc3-bc47-5cc3-9e93-66dda848c439",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://everycarebd.com/4567.exe",
      "pattern": "[url:value = 'https://everycarebd.com/4567.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:59:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858726/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f047d27-a95c-5652-a9d9-f88b3571a7a0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gxhztve.bingobet90.com/5f88b9f0-3f38-4e2d-a6d7-3a963e55febc",
      "pattern": "[url:value = 'https://gxhztve.bingobet90.com/5f88b9f0-3f38-4e2d-a6d7-3a963e55febc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:59:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858725/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dba1c05-c989-58f9-a2f0-c6965e723e8e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.88.91:35864/bin.sh",
      "pattern": "[url:value = 'http://182.126.88.91:35864/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:54:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858724/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13611f70-2f49-5c41-a363-fb00a6875696",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.118.179:33325/i",
      "pattern": "[url:value = 'http://182.121.118.179:33325/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:54:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858723/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c30ff4ee-a438-56df-b1e5-de30aa6ca5b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.118.179:33325/bin.sh",
      "pattern": "[url:value = 'http://182.121.118.179:33325/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:51:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858722/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78742b23-ac14-5e1d-ac28-adf7fdf41953",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1jqpw8UHpsY5ps3nKOfkyo2ql4hC23Mew",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1jqpw8UHpsY5ps3nKOfkyo2ql4hC23Mew']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:51:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858721/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c09bac89-aaf5-5ffc-a101-33fe8191e803",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1u0g1doVUDc5VCeP653aze60SGlhs3efQ",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1u0g1doVUDc5VCeP653aze60SGlhs3efQ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:51:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858719/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc1d7441-73f5-542d-b915-0ded19850d2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1FA9TvcakCgfeRdLaejIJbeoFjuI9GB6R",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1FA9TvcakCgfeRdLaejIJbeoFjuI9GB6R']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:51:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858720/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b846fb3-d6ac-5f34-9df8-ff4de10e8425",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/tax_notice.zip",
      "pattern": "[url:value = 'https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/tax_notice.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:50:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858715/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc00ab84-7513-5970-8bf2-1b9133d4e64b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/payment_due_notice.zip",
      "pattern": "[url:value = 'https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/payment_due_notice.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:50:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858716/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b58ccc5-1e8b-5547-bada-c051ee2c3728",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/tax_refund.zip",
      "pattern": "[url:value = 'https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/tax_refund.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:50:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858717/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--257c12b6-aca4-5e26-81c0-5d1bae6a226d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/pwko.zip",
      "pattern": "[url:value = 'https://github.com/daldalkim/cuddly-octo-waddle/releases/download/v1.0.0/pwko.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:50:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858718/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6c24714-2a82-5bb0-bfbd-943e3fe7e948",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://45.61.150.125/wem/stego_payloaad.png",
      "pattern": "[url:value = 'https://45.61.150.125/wem/stego_payloaad.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:48:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858714/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddb5a7ca-c991-55cc-926f-cfc0f6626603",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://kpmmg.org//common/caches/snake.png",
      "pattern": "[url:value = 'http://kpmmg.org//common/caches/snake.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:47:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858712/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da3e7fb2-3ce4-5ba9-b772-24cca5b64a52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://kpmmg.org//common/caches/phantom_tg.png",
      "pattern": "[url:value = 'http://kpmmg.org//common/caches/phantom_tg.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:47:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858713/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c0bdee9-2d4c-5912-8764-c6817409ba46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/HoynesDoubled",
      "pattern": "[url:value = 'https://paste.sensio.no/HoynesDoubled']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:46:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858711/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad667aa1-5c6c-5cab-841f-da70d3ab68db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-33172110f57a4bbfa0c089261c8b7d4d.r2.dev/uni.png",
      "pattern": "[url:value = 'https://pub-33172110f57a4bbfa0c089261c8b7d4d.r2.dev/uni.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:46:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858710/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97053610-5025-56ef-9ff5-e2ee48a5b971",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/pMNiA",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/pMNiA']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858709/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae115818-12d0-5237-bb01-ff5c5f4827ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-ce02802067934e0eb072f69bf6427bf6.r2.dev/tinubu.png",
      "pattern": "[url:value = 'https://pub-ce02802067934e0eb072f69bf6427bf6.r2.dev/tinubu.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:44:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858708/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9900c8c-510b-5287-9102-c4d88d92918d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/rIdMb",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/rIdMb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:44:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858707/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--381b209b-38f3-5e5f-b53d-0bc4047e3094",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://kpmmg.org//common/caches/xwbin.png",
      "pattern": "[url:value = 'http://kpmmg.org//common/caches/xwbin.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:43:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858706/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ef81013-8b83-590b-adf0-16238c057a11",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nanshiin.com/1.jpg",
      "pattern": "[url:value = 'https://nanshiin.com/1.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:42:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858704/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e430dca1-da3e-58a8-a9a8-abc0eb304a9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pastefy.app/oBAYj3ui/raw",
      "pattern": "[url:value = 'https://pastefy.app/oBAYj3ui/raw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:42:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858705/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c009341-7a69-5acd-a6e3-37d7708d77d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/400/Goodpersonforbetterone.hta",
      "pattern": "[url:value = 'http://104.168.115.123/400/Goodpersonforbetterone.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:41:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858703/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b05f7f12-51b4-5272-8f6d-382b28823d19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/70/img_001939.png",
      "pattern": "[url:value = 'http://107.172.13.211/70/img_001939.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:40:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858701/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a025054d-e1ee-55b5-b607-7522ebfe9a2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/70/goodformulafodme.hta",
      "pattern": "[url:value = 'http://107.172.13.211/70/goodformulafodme.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:40:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858702/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1ae1757-b7d5-5e22-8fbd-4b74698962db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://172.245.209.218/80/img_212549.png",
      "pattern": "[url:value = 'http://172.245.209.218/80/img_212549.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:40:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858700/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41a12478-e1b5-521f-b55a-a236d6775f13",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/400/img_033451.png",
      "pattern": "[url:value = 'http://104.168.115.123/400/img_033451.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:40:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858699/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c5aae95-cfeb-5d2d-953d-6500d7aa5e8b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://172.245.209.218/80/goodthingsforbetterperson.hta",
      "pattern": "[url:value = 'http://172.245.209.218/80/goodthingsforbetterperson.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:40:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858698/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c0f9b61-d929-5070-af24-46efe01e0376",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_808d5e8e6a974796.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_808d5e8e6a974796.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:38:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858697/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab34f38c-a6b6-5ac6-91dc-c09ceb00ed35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://3i8e3aty.ef90bet.com/?ublib=fbf49a3f-26f7-4638-b5d0-239c23c6a491",
      "pattern": "[url:value = 'https://3i8e3aty.ef90bet.com/?ublib=fbf49a3f-26f7-4638-b5d0-239c23c6a491']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:36:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858696/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a8bd028-158b-5c93-a7a9-6f70c57a7b2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.44.167.219/img/kb/nc/greatrankcreationforbestshipping.hta",
      "pattern": "[url:value = 'http://96.44.167.219/img/kb/nc/greatrankcreationforbestshipping.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:34:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858695/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1148197-f03e-5517-88ab-fb6b22d42491",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://onceuponatimethebabyangelcamebacktotheearthtogoformebestwishesg.ydns.eu/img/optimized_MSI.png",
      "pattern": "[url:value = 'http://onceuponatimethebabyangelcamebacktotheearthtogoformebestwishesg.ydns.eu/img/optimized_MSI.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:34:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858694/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57088c3e-55a0-5e4d-b33b-2e622d4728af",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://96.44.167.219/httpswww.tcs.comwhat-we-doindustriespublic-servicessolutiontcs-sovereignsecure-cloud-ring.php",
      "pattern": "[url:value = 'http://96.44.167.219/httpswww.tcs.comwhat-we-doindustriespublic-servicessolutiontcs-sovereignsecure-cloud-ring.php']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:34:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858693/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3de2d06d-f6ed-554d-ba9a-dcb8edf7fd1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mlvzrpw.betyyy.casino/c9ed23eb-3dd5-4066-96a2-e8cd0c7e4f4a",
      "pattern": "[url:value = 'https://mlvzrpw.betyyy.casino/c9ed23eb-3dd5-4066-96a2-e8cd0c7e4f4a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:23:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858692/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--871568c5-e090-5e8e-92be-30f3f97ad4eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.69.89.142:58031/i",
      "pattern": "[url:value = 'http://36.69.89.142:58031/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:22:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858691/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09e8e30b-bf24-53f4-91a0-4b49ced09c20",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kits.frog.tw/.well-known/acme-challenge/IMG_20260531_214059_714.png",
      "pattern": "[url:value = 'https://kits.frog.tw/.well-known/acme-challenge/IMG_20260531_214059_714.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:16:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858690/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--542a2da6-2a0d-5fe8-b866-036bf20f82db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kits.frog.tw/Images/funny.png",
      "pattern": "[url:value = 'https://kits.frog.tw/Images/funny.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:16:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858689/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28b4b18f-da6f-58d4-a791-7ff05d351e7f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://36.69.89.142:58031/bin.sh",
      "pattern": "[url:value = 'http://36.69.89.142:58031/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:07:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858688/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c40d9a0-2f64-54bb-bde5-708fde0282d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hqp-llc.com/wp-content/uploads/2023/04/taskHost.exe",
      "pattern": "[url:value = 'https://hqp-llc.com/wp-content/uploads/2023/04/taskHost.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:04:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858687/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00727610-7b03-50c5-8247-8ca15321646b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/gigatex/mips",
      "pattern": "[url:value = 'http://92.42.100.131/gigatex/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:03:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858683/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edb69a1c-038d-5534-ba4b-5128b4d683d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/gigatex/arm",
      "pattern": "[url:value = 'http://92.42.100.131/gigatex/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:03:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858684/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8839660-5673-5534-a9ce-6f7092a211df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/gigatex/mpsl",
      "pattern": "[url:value = 'http://92.42.100.131/gigatex/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:03:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858685/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5b471aa-5d3f-5945-bc68-9140d2f127ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/gigatex/arm5",
      "pattern": "[url:value = 'http://92.42.100.131/gigatex/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:03:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858686/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a960b4e-e19c-5535-9eef-80f7d0307d3a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/gigatex/arm7",
      "pattern": "[url:value = 'http://92.42.100.131/gigatex/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858681/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec90e7b7-368e-5e61-bbb2-6da4be80c544",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://180.244.40.137:33755/i",
      "pattern": "[url:value = 'http://180.244.40.137:33755/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T14:02:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858682/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3944c19-23b9-59ce-b639-ac7ba9d7c48a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.46.132.228:56604/i",
      "pattern": "[url:value = 'http://125.46.132.228:56604/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:55:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858680/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cea8a79-b5f1-57a2-8e11-ccb65dfda9ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://jojxmyi.betwoonuyelik.com/9de42a33-f1b3-4683-8402-c5600ad3b0dc",
      "pattern": "[url:value = 'https://jojxmyi.betwoonuyelik.com/9de42a33-f1b3-4683-8402-c5600ad3b0dc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:48:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858679/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d2c591a-11bf-54c1-a7fe-6666d85d918b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.23.8:48615/bin.sh",
      "pattern": "[url:value = 'http://222.137.23.8:48615/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:46:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858678/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68aafdcb-7f3a-5357-bc4a-75c186d61d2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.225.18:36131/i",
      "pattern": "[url:value = 'http://42.232.225.18:36131/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:38:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858677/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e006b30-e769-50aa-aaa8-673eeabe885a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.46.132.228:56604/bin.sh",
      "pattern": "[url:value = 'http://125.46.132.228:56604/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:32:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858676/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--661505e0-3e5c-5c12-9140-c25b4d873929",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://ybhub.com.au/stego_paload.png",
      "pattern": "[url:value = 'http://ybhub.com.au/stego_paload.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:29:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858675/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6fd5fbf-7686-591d-aaf7-3244457e0f63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://180.244.40.137:33755/bin.sh",
      "pattern": "[url:value = 'http://180.244.40.137:33755/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:27:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858674/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fed1eee5-457c-517e-b4d7-737e01388919",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://fq5lyk18.bet404.games/?ublib=3a1be5a4-980c-47b7-8750-846326c80c97",
      "pattern": "[url:value = 'https://fq5lyk18.bet404.games/?ublib=3a1be5a4-980c-47b7-8750-846326c80c97']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:23:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858673/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50617d05-4d9a-5ea8-bcd8-348c3cea6d76",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.152.210:47806/i",
      "pattern": "[url:value = 'http://182.127.152.210:47806/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:22:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858672/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06bc42fd-e9cb-56b3-a22d-00a7616d4ce8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.67.138:38512/i",
      "pattern": "[url:value = 'http://125.45.67.138:38512/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:19:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858671/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26617df3-2e0f-55ab-813c-f2217a7ef166",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://files.catbox.moe/3gc972.ps1",
      "pattern": "[url:value = 'https://files.catbox.moe/3gc972.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:14:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858670/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9818c695-d4d1-5266-9888-8ed045873e33",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.179.66:48263/i",
      "pattern": "[url:value = 'http://115.52.179.66:48263/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:14:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858669/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d556683f-01d7-55a6-8ce3-e4833183ccb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ptapgsl.betwana.casino/6e9fb347-67ee-4518-8668-88397420ceaf",
      "pattern": "[url:value = 'https://ptapgsl.betwana.casino/6e9fb347-67ee-4518-8668-88397420ceaf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:13:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858668/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e77c9add-c820-51bc-b852-2a5a0f092cbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.213.175.222/mp/file.png",
      "pattern": "[url:value = 'http://188.213.175.222/mp/file.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:08:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858667/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3703d2a0-8ff1-557a-9cc5-9841258a7376",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://151.245.104.193/1.sh",
      "pattern": "[url:value = 'http://151.245.104.193/1.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858665/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7fc304b-fd14-5099-9853-252eda48e61a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://223.123.38.120:33713/Mozi",
      "pattern": "[url:value = 'http://223.123.38.120:33713/Mozi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858666/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fc37fb7-ed7c-520d-98aa-b26d9e23a393",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.85.110.38:41787/Mozi.m",
      "pattern": "[url:value = 'http://110.85.110.38:41787/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858663/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c74fdbb-b2f3-598d-9f07-2a39d094be4d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.183.40:43867/Mozi.m",
      "pattern": "[url:value = 'http://115.57.183.40:43867/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858664/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9a2a638-2845-5aa8-9277-37689394e39f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://fluffynoodle.xyz/ash",
      "pattern": "[url:value = 'https://fluffynoodle.xyz/ash']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858662/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2fff88f-6dab-5e6d-bbd3-51864b443e70",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_30ecb0a5dbaa1ba1.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_30ecb0a5dbaa1ba1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858658/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fa7e20a-e17d-52d8-917f-e189e0b63d06",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.129/g.sh",
      "pattern": "[url:value = 'http://176.65.139.129/g.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858659/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a917ba6f-c95a-58f7-b270-0d0c495e509d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_367971ed01760582.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_367971ed01760582.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858660/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc3d376b-8e9c-5271-a17a-351a8c2d9db6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_61494061c939bae3.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_61494061c939bae3.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:04:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858661/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2faf886-13b1-5580-ba09-5831e4d9def8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.153.170:59443/i",
      "pattern": "[url:value = 'http://182.127.153.170:59443/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T13:01:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858657/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0f2fa2f-668f-576f-b63d-a1c6c008feba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.127.153.170:59443/bin.sh",
      "pattern": "[url:value = 'http://182.127.153.170:59443/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:59:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858656/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d5f2263-5741-5235-9591-1648d93db82f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.67.138:38512/bin.sh",
      "pattern": "[url:value = 'http://125.45.67.138:38512/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:54:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858655/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--716456b0-a8bf-5ea0-9a29-d19013f65673",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.52.179.66:48263/bin.sh",
      "pattern": "[url:value = 'http://115.52.179.66:48263/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:48:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858654/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b057dd98-7fef-589a-896b-bd0a7f1097cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.204.157.55:43222/i",
      "pattern": "[url:value = 'http://203.204.157.55:43222/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:46:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858653/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff6d822c-f362-5c11-8c47-5d959be878fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zchjlsi.betwana.bet/86b4c01f-221b-44f4-a129-328538bf2012",
      "pattern": "[url:value = 'https://zchjlsi.betwana.bet/86b4c01f-221b-44f4-a129-328538bf2012']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:41:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858652/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6c760f5-cc03-5f74-bfea-ff5f6479eb84",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.64.245:42306/bin.sh",
      "pattern": "[url:value = 'http://110.36.64.245:42306/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:32:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858651/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33e9d2e2-8d4a-5515-a5f7-82288b1aaf50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.22.13:49179/bin.sh",
      "pattern": "[url:value = 'http://123.9.22.13:49179/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:32:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858650/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be42883d-23f8-5ac2-bd35-581ff17ef69c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://119.179.217.155:41847/bin.sh",
      "pattern": "[url:value = 'http://119.179.217.155:41847/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:19:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858649/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d2ed5c9-a073-5868-9bc3-9467c4ef3229",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://203.204.157.55:43222/bin.sh",
      "pattern": "[url:value = 'http://203.204.157.55:43222/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:17:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858648/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa102ace-d211-5169-b5a9-7d0f7cab4f50",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://yzqorlb.betvolleyball.net/07d9cd3a-6350-4cc5-aa58-e14ec597d8f6",
      "pattern": "[url:value = 'https://yzqorlb.betvolleyball.net/07d9cd3a-6350-4cc5-aa58-e14ec597d8f6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T12:01:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858647/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b188ed73-f243-540f-8f2d-c4a59813934e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.10.9.215:48613/i",
      "pattern": "[url:value = 'http://123.10.9.215:48613/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:55:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858646/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cead6d7f-1cc1-5e85-a2aa-812cfd0c4d10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.129.130.243:42791/bin.sh",
      "pattern": "[url:value = 'http://123.129.130.243:42791/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:32:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858645/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--feb6fb6e-9dd9-5096-b142-e938f9ce035b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://byucosm.bettime.win/99110a79-c0b7-4eab-8097-0659e271070d",
      "pattern": "[url:value = 'https://byucosm.bettime.win/99110a79-c0b7-4eab-8097-0659e271070d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:30:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858644/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbbca9cf-a088-5767-9bcf-a4370352c5f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.241.60:47760/i",
      "pattern": "[url:value = 'http://110.39.241.60:47760/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:29:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858643/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--363b92b1-f4a0-513b-acd9-cd8cdb1be990",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.126.34:54297/i",
      "pattern": "[url:value = 'http://182.126.126.34:54297/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:25:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858642/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a8ddb00-fe55-5a8b-95d1-eb63e79895ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://6dg7sjam.bet404farsi.com/?ublib=e2a2cce5-71b2-4d93-958e-e409450973ee",
      "pattern": "[url:value = 'https://6dg7sjam.bet404farsi.com/?ublib=e2a2cce5-71b2-4d93-958e-e409450973ee']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:24:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858641/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64271af3-a937-5ecb-b053-cbb3f304ad9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://138.204.196.254:56825/i",
      "pattern": "[url:value = 'http://138.204.196.254:56825/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:23:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858640/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8de1070d-a83c-5d20-98e9-68dc4c3d7838",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.144.157:57821/i",
      "pattern": "[url:value = 'http://123.5.144.157:57821/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:11:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858639/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1576a27b-a7d5-54aa-8113-2f606e03d400",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.241.60:47760/bin.sh",
      "pattern": "[url:value = 'http://110.39.241.60:47760/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T11:10:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858638/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--662e97c1-bdf1-507f-9dc9-cc23170afb3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.126.34:54297/bin.sh",
      "pattern": "[url:value = 'http://182.126.126.34:54297/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:54:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858637/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4d5fef7-bda5-5b1f-80b9-3387092ca29a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://clmkghe.bettime90.casino/691c76f9-784c-4137-b14f-313760339a85",
      "pattern": "[url:value = 'https://clmkghe.bettime90.casino/691c76f9-784c-4137-b14f-313760339a85']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:54:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858636/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6363a1cb-17a2-5da5-a7e8-dddb7a136f40",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://138.204.196.254:56825/bin.sh",
      "pattern": "[url:value = 'http://138.204.196.254:56825/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:50:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858635/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3b2db19-545c-58c9-8e12-a021c792415f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://140.233.190.47/tr",
      "pattern": "[url:value = 'http://140.233.190.47/tr']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858634/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--222e07bc-39db-5f1a-aa4d-21a5abd5783d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.5.144.157:57821/bin.sh",
      "pattern": "[url:value = 'http://123.5.144.157:57821/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:30Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858633/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c272e72f-a3d6-5b42-8c74-f77214fbc4b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/arm72",
      "pattern": "[url:value = 'http://92.42.100.131/arm72']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858609/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b10cb946-c284-520e-9b87-a6a8a74eeacb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/giga.sh",
      "pattern": "[url:value = 'http://92.42.100.131/giga.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858610/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07f77935-62f9-5e1d-93c6-a5b4bed91bcf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/old",
      "pattern": "[url:value = 'http://92.42.100.131/old']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858611/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74a498b9-f755-5560-a316-359503bb1650",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/dlr.arm5",
      "pattern": "[url:value = 'http://92.42.100.131/dlr.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858612/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f20d6d0f-8ced-574d-ad1a-845760fe7645",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/netis.sh",
      "pattern": "[url:value = 'http://92.42.100.131/netis.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858613/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6d97a61-7cf6-5d16-a932-3b7737f2ea2b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/dlr.arm4",
      "pattern": "[url:value = 'http://92.42.100.131/dlr.arm4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858614/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e50239-c55c-5954-9661-45b8021f008b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.i686",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858615/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9babf383-7dda-56cc-a244-8d52b16794ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.sh4",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858616/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a386857-2eca-5cef-a051-24dd70af52fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.spc",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858617/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0e6f730-b427-56e1-969f-482be6f7c378",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/dlr.mips",
      "pattern": "[url:value = 'http://92.42.100.131/dlr.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858618/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3679acbb-f2b0-55dc-bad3-d603cbd8f098",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.mipsl",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.mipsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858619/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d70d274c-1785-57ad-88b3-4934a4cbd4f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.arm5",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858621/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c15a932-2d4f-57cc-b864-5bc26f18f87b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.mips",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858622/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66969fa8-0571-56a2-8158-d61e782fe622",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.x86_32",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.x86_32']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858623/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35a0d98d-4301-5d6e-a668-b50b3b27faca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.i486",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858624/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--070a05fa-dd2d-5b10-ac8a-0827563feb13",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.ppc",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858625/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1384085d-732c-5f80-8384-78c406b1487e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.arc",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858626/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8dac402-afea-5f15-9da9-cac612e1725a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/f",
      "pattern": "[url:value = 'http://78.153.155.152/f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858627/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b20493a-041d-501e-b071-957eb9d61801",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.ppc440",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.ppc440']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858628/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e722c8d6-7b1a-5562-955b-9fc7e150f343",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/x86_64",
      "pattern": "[url:value = 'http://94.183.182.184/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858629/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75279763-0693-5542-b215-a4921b302e79",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.arm",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858630/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c53307da-42ab-5b60-9973-fa519dc27950",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/dlr.mpsl",
      "pattern": "[url:value = 'http://92.42.100.131/dlr.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858631/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8584ab07-7b08-59d5-b873-5ab19b5ad86e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.m68k",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858632/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d7bb3e0-a928-586d-a200-d69cf34c089b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/hmips",
      "pattern": "[url:value = 'http://92.42.100.131/hmips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858608/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc6f0b3d-8199-5691-b3b9-78e2e082ed21",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.arm6",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:49:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858607/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6df072ce-b319-5210-8583-2a4811b61d39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kfvgvcb.betrophy90.com/cc06ec3e-7275-44d9-9cb5-f0cf8621d8d0",
      "pattern": "[url:value = 'https://kfvgvcb.betrophy90.com/cc06ec3e-7275-44d9-9cb5-f0cf8621d8d0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:19:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858606/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c853f77-b030-5456-89ac-fcef9af11670",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.135.72:43125/i",
      "pattern": "[url:value = 'http://115.58.135.72:43125/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:11:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858605/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f781c5ad-5d12-550d-9fd3-ef1fb2e6ef87",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.11.225:48925/bin.sh",
      "pattern": "[url:value = 'http://110.36.11.225:48925/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:07:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858604/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--073555ad-cab3-5bea-a66b-253d073dabd0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://swmzey.3sefr3.ir/34e1e67f-c08b-4ce9-aca5-a5d252536caa",
      "pattern": "[url:value = 'https://swmzey.3sefr3.ir/34e1e67f-c08b-4ce9-aca5-a5d252536caa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:05:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858603/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b60a4a6-754f-5491-a370-2d087f6274d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/arm5",
      "pattern": "[url:value = 'http://92.42.100.131/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:03:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858602/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d05df3fa-c89c-5f15-8767-2791158686b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://160.191.243.187/bins/jbd2_sda1d",
      "pattern": "[url:value = 'http://160.191.243.187/bins/jbd2_sda1d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:02:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858601/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--809e2e1d-a33c-59a0-862c-d37fdaebfc3d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://160.191.243.187/bins/kworker_u8",
      "pattern": "[url:value = 'http://160.191.243.187/bins/kworker_u8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:02:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858600/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b2c9aff-5963-585d-b06f-d63725fdeb63",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://160.191.243.187/bins/ksoftirqd0",
      "pattern": "[url:value = 'http://160.191.243.187/bins/ksoftirqd0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:02:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858599/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dbb612d-61d0-52dd-90bd-5f28c13e7dcd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://160.191.243.187/bins/loader.sh",
      "pattern": "[url:value = 'http://160.191.243.187/bins/loader.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858597/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59fac403-a8e4-5642-b99a-bccaa9a0d38a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnmipsxnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnmipsxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:02:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858598/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9341674-559f-5a87-8efa-f1a3542eff82",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnriscv32xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:47Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858596/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28092b13-3082-50d1-b6ee-f32c0dcf758b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnm68kxnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnm68kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858594/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fa4798f-db4f-5e63-b32d-fab0173a5714",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://195.178.110.204/sexy.apk",
      "pattern": "[url:value = 'http://195.178.110.204/sexy.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:45Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858595/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa0e0cc0-e5f4-5418-8a0b-aa50bdd8f322",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.arm7",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858592/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc0636cf-4ff2-563d-86cf-0803d68bd0b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnor1kxnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnor1kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858593/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--304de1d9-846a-5632-a434-fcab42e748d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnx86_64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858590/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4eeb011b-a71e-52d5-b190-5bc84cae0943",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://140.233.190.47/debug",
      "pattern": "[url:value = 'http://140.233.190.47/debug']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:41Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858591/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f134e923-7a4a-55f0-aa0a-6211594c34f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnmipsxnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnmipsxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:40Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858589/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25fae8a7-b360-5c39-b699-e84e29072780",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/x86",
      "pattern": "[url:value = 'http://94.183.182.184/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858582/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eaed71b-5a6c-5070-8405-5c64c9afdbe7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/arm7",
      "pattern": "[url:value = 'http://94.183.182.184/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858583/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9583a850-7906-5672-9345-a50d33fa5082",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/huhu/titanjr.x86_64",
      "pattern": "[url:value = 'http://23.238.39.247/huhu/titanjr.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858584/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--930df525-af08-5cec-b760-16496c9918b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.armv4l",
      "pattern": "[url:value = 'http://82.25.63.213/iran.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858585/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f409e33d-584b-54a3-a7ca-20f053d48d36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858586/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b142246a-aee1-5fbd-809f-118f1215b8e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/debug.dbg",
      "pattern": "[url:value = 'http://94.183.182.184/debug.dbg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858587/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bc06d9b-05e7-5524-8676-32f86f3f1e9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/arm5",
      "pattern": "[url:value = 'http://94.183.182.184/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:37Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858588/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c35543a-1a7f-5228-9581-a6460379359d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/arm",
      "pattern": "[url:value = 'http://92.42.100.131/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:36Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858581/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1d7601a-a04e-5d1a-8388-292ea1fb3aba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858576/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8317a1f-0259-5688-b574-33752247d0e3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnsh2xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnsh2xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858577/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3eb40e9c-0b79-508a-92ba-02fa1c277a01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858578/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b251585-ba1a-5542-908c-d60a40eeee05",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnriscv32xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858579/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d58d775-bc51-5eba-8fd4-216ca4f8eeb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxni386xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxni386xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:35Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858580/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f77b5de-982b-5fd9-b82e-a300d24450fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnor1kxnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnor1kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858575/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a511a3cb-659d-5520-aff4-1d31af813453",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/arm6",
      "pattern": "[url:value = 'http://94.183.182.184/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858565/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0595def6-f90f-5f4c-81c8-1f4ce4d483ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/ppc",
      "pattern": "[url:value = 'http://94.183.182.184/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858566/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d3c7f46-2627-5e35-b5f1-498bdcf90961",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/m68k",
      "pattern": "[url:value = 'http://94.183.182.184/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858567/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e44a5d6a-fd35-5fcc-b035-077c83f9562c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/aarch64",
      "pattern": "[url:value = 'http://92.42.100.131/aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858568/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7897e03f-672a-5089-99be-1ef24b8b755b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/mips",
      "pattern": "[url:value = 'http://78.153.155.152/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858569/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5399b08-df35-5ba1-b99c-01185d81acf4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnsh4xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnsh4xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858570/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8fef50f-5803-5ff8-aada-decb98ac0930",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnriscv64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858571/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0cec202-30de-58a3-ab9e-ff0cc428e6b4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.m68k",
      "pattern": "[url:value = 'http://82.25.63.213/iran.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858572/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e67a30b-33e3-54c1-ba22-7afe2696763d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.armv6l",
      "pattern": "[url:value = 'http://82.25.63.213/iran.armv6l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858573/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73b158f9-bec2-5874-a0bf-57e180aab937",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/spc",
      "pattern": "[url:value = 'http://94.183.182.184/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858574/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--399d5f35-6cbc-5954-89d6-5289f09fa21f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnriscv32xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858553/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4e1fe4a-fcf5-503d-a0ae-426e9b829a0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxni386xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxni386xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858554/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b903c35f-cf2f-50aa-8692-9eee480b0caa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnsh4xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnsh4xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858555/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96cafb4e-929c-5aed-9a8d-ad6aa16f746a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnx86_64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858556/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81856c24-d55c-5bb7-9ecb-cbdccc7936e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.x86_64",
      "pattern": "[url:value = 'http://82.25.63.213/iran.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858557/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--809a6474-eed3-541a-b718-7dd0e82d15ab",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnmipsxnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnmipsxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858558/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2932d375-4439-51d0-adfa-6c7f643d5c9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.i486",
      "pattern": "[url:value = 'http://82.25.63.213/iran.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858559/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c7238f6-345e-571d-a3aa-3f7715a7542d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnsh2xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnsh2xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858560/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a5907fe-6dfc-5fea-a731-db9106a2d336",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858561/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a0a65ea-f743-56c3-bc29-8aa3b821c75c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnriscv64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858562/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45b173d5-58bf-544a-b08c-c6d6188a69ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.arc",
      "pattern": "[url:value = 'http://82.25.63.213/iran.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858563/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5ec98d2-4ced-5096-8e21-20fae45b57b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.powerpc",
      "pattern": "[url:value = 'http://82.25.63.213/iran.powerpc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858564/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc30b9b2-7331-5f93-a96b-67233db66b41",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.armv7l",
      "pattern": "[url:value = 'http://82.25.63.213/iran.armv7l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858552/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e86c9a88-f34d-5d86-b451-dab4e599aec3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnm68kxnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnm68kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858550/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5be362a-31ed-50c2-9453-61242f9769f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/arm5",
      "pattern": "[url:value = 'http://78.153.155.152/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858551/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9d63848-988c-5886-aadc-999ad1efb0e6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.mips",
      "pattern": "[url:value = 'http://82.25.63.213/iran.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858546/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59c6c601-1df9-5f7a-ac3c-f318780e692b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858547/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eefc031-dbab-5413-a570-3b3bd4b09ba6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxni386xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxni386xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858548/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9818eb6-e2fe-5d5c-9739-83d89770ed01",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/mipsel",
      "pattern": "[url:value = 'http://78.153.155.152/mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858549/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cad705b9-2802-5a7f-838a-254b2260031b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/mips",
      "pattern": "[url:value = 'http://94.183.182.184/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858541/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20495641-69a0-5f7d-85be-1074d9520924",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_0e9171fdd91b657d.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_0e9171fdd91b657d.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858542/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5bb0d4a-09f7-5974-995c-9bc6f045ee89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnx86_64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858543/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16c2e6fe-c592-57a2-abf7-5dd1878ce5df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858544/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee5e43af-75da-5e40-b75d-bc746ba1a697",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/arm",
      "pattern": "[url:value = 'http://78.153.155.152/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858545/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39850f60-dd7c-5f4b-b2fb-52dd791fcb75",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/sh4",
      "pattern": "[url:value = 'http://94.183.182.184/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858539/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01cb3e4e-5548-5f04-9667-9107526fd15d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/arm",
      "pattern": "[url:value = 'http://94.183.182.184/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858540/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea0ed416-4b0f-56b8-b394-dee37bf9ebde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnsh4xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnsh4xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858538/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e24ea18-dc66-579e-b4c1-769ebc294cde",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/dlr.arm7",
      "pattern": "[url:value = 'http://92.42.100.131/dlr.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858526/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53ef156b-8789-50eb-8870-3701fe402e4b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/dlr.x86",
      "pattern": "[url:value = 'http://92.42.100.131/dlr.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858527/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d83874fa-bc0c-509b-9535-fb4d78c4bd17",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.sparc",
      "pattern": "[url:value = 'http://82.25.63.213/iran.sparc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858528/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e16aef4-adee-5e36-8383-4c8e82dcc125",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.sh4",
      "pattern": "[url:value = 'http://82.25.63.213/iran.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858529/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7320db7d-8b6d-5926-bbbe-56ea88d1bf1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnaarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858530/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b57a98a-19da-5123-91bd-4354a047ddf8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858531/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01ab5860-bce9-5b99-92fd-0ffa5a66d4d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.mipsel",
      "pattern": "[url:value = 'http://82.25.63.213/iran.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858532/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20274c00-8c85-53ea-89e3-67e9f83296ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnor1kxnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnor1kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858533/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a315b24-2007-5286-b83e-4ee6d18ae162",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/bins/xnxnxnxnxnxnxnxnm68kxnxn",
      "pattern": "[url:value = 'http://64.89.162.60/bins/xnxnxnxnxnxnxnxnm68kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858534/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--010acaf7-2ce9-5e14-a0f5-9da7eda6cf9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
      "pattern": "[url:value = 'http://185.242.3.63/bins/xnxnxnxnxnxnxnxnaarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858535/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9df702bc-59ba-5175-b9af-71600c6a56a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/arm7",
      "pattern": "[url:value = 'http://78.153.155.152/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858536/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a3bd3fa-9df2-5200-93f8-4a5631a9583f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.183.182.184/mpsl",
      "pattern": "[url:value = 'http://94.183.182.184/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858537/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49cc37f7-a818-5a7d-a63f-607c02bb4de7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858521/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4322bf5c-9dd9-5085-a7d0-c5c3e2e8c036",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnsh2xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnsh2xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858522/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d93e9e9-c715-57d2-9242-aa5b61b30165",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnaarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858523/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6673f0af-5efe-5672-8cee-857dbed19009",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858524/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0902e82-db6e-56a5-b9d5-1d2fc3c7bd9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
      "pattern": "[url:value = 'http://45.153.34.230/bins/xnxnxnxnxnxnxnxnriscv64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858525/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b716f57-0d6c-50a2-a96d-0d71ac4a826f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.armv5l",
      "pattern": "[url:value = 'http://82.25.63.213/iran.armv5l']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858520/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c79e6e5-439d-5cbc-9bac-00fb01aa1318",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/iran.aarch64",
      "pattern": "[url:value = 'http://82.25.63.213/iran.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:01:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858519/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3512e7f3-c7ab-562b-8f89-f95fee1007ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://185.242.3.63/run.sh",
      "pattern": "[url:value = 'http://185.242.3.63/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858518/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c516dba7-3b75-5ff1-9944-b02b9cdcbf19",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/all.sh",
      "pattern": "[url:value = 'http://5.175.223.249/all.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858509/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--057c187c-3370-5383-9940-4f722ba1d19a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://195.178.110.204/adb",
      "pattern": "[url:value = 'http://195.178.110.204/adb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858510/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d54a7d7-d111-57ed-ac43-4d19ecc6bb37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.153.34.230/run.sh",
      "pattern": "[url:value = 'http://45.153.34.230/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858511/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59f6ff75-3654-57ea-9a2f-07f3a62c5776",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://64.89.162.60/run.sh",
      "pattern": "[url:value = 'http://64.89.162.60/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858512/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a47fc0c1-12ee-59ee-a215-ae622fae3ede",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://82.25.63.213/cat.sh",
      "pattern": "[url:value = 'http://82.25.63.213/cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858513/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8867971e-6109-5814-8baf-d4bab81ae23e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/tplink.sh",
      "pattern": "[url:value = 'http://78.153.155.152/tplink.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858514/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61f23617-d634-5177-8c6c-6a3c389955d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/t",
      "pattern": "[url:value = 'http://78.153.155.152/t']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858515/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f26380dd-55f5-54d9-89f2-69b88825af6c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://23.238.39.247/all.sh",
      "pattern": "[url:value = 'http://23.238.39.247/all.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858516/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc8f7c9c-5e83-5ef5-b04f-f2b7697fe47d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://78.153.155.152/o",
      "pattern": "[url:value = 'http://78.153.155.152/o']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858517/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec8ece1b-5a16-58a0-938c-240d270c45d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://92.42.100.131/o",
      "pattern": "[url:value = 'http://92.42.100.131/o']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858507/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eaf12311-8787-55de-9cd1-634d7da30614",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://195.178.110.204/a",
      "pattern": "[url:value = 'http://195.178.110.204/a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858508/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfd31c40-7552-5418-8ed0-3b97f630027d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/get.sh",
      "pattern": "[url:value = 'http://5.175.223.249/get.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T10:00:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858506/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffbe0024-fc87-5289-aa77-262ebd65b7d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.43.94:45113/i",
      "pattern": "[url:value = 'http://182.113.43.94:45113/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858505/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ec96e50-8df1-5a66-b87d-db781b6a59c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ecomarkperu.com/vvvvvvvvv.ps1",
      "pattern": "[url:value = 'https://ecomarkperu.com/vvvvvvvvv.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:46:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858504/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b9030e6-e857-5b53-ac7b-f94b0e6922ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hottestline.pro/Sudsss-02-06/magazine25348.ecw",
      "pattern": "[url:value = 'https://hottestline.pro/Sudsss-02-06/magazine25348.ecw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858503/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8be008a-5e6e-5505-bc0d-d705f5036b5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://db0.chris-smart.workers.dev/Sudsss-02-06/droop/actively/amount/6/4/2026/ay25348.kdc",
      "pattern": "[url:value = 'https://db0.chris-smart.workers.dev/Sudsss-02-06/droop/actively/amount/6/4/2026/ay25348.kdc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:46:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858502/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--638691a2-b37b-5db2-9fb9-7a381fc347b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/spx.vbs",
      "pattern": "[url:value = 'https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/spx.vbs']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:45:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858501/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--776518d4-45e3-5a08-a9ba-879d060cc227",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/ficeo.zip",
      "pattern": "[url:value = 'https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/ficeo.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:45:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858500/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08ee282e-cb4e-5b0f-92eb-eb1707342456",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txt",
      "pattern": "[url:value = 'https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858499/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7ca7cf1-c92c-589c-8453-e0c994835ee3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.58.135.72:43125/bin.sh",
      "pattern": "[url:value = 'http://115.58.135.72:43125/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:44:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858498/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3a5b66f-bdaf-53b9-bc2a-75214c15e7fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://inervadores.life/bin/stego_payload.png",
      "pattern": "[url:value = 'https://inervadores.life/bin/stego_payload.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:44:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858497/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8216684-2263-5daa-98f7-0989d8a23921",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.213.175.222/mp/files.png",
      "pattern": "[url:value = 'http://188.213.175.222/mp/files.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:44:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858496/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3418d613-bdb4-5c2f-a327-755e3fcf56f5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://delte-mobrey.com/images/587.exe",
      "pattern": "[url:value = 'https://delte-mobrey.com/images/587.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:43:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858495/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95b1cb7e-94b2-5273-9339-f3a3075f6ec5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ffeqlui.betrayon.casino/bc84e8a9-e44b-47de-b068-ba0379defd7a",
      "pattern": "[url:value = 'https://ffeqlui.betrayon.casino/bc84e8a9-e44b-47de-b068-ba0379defd7a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:43:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858494/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8259451-834c-5127-9f2d-f82277988e8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.97/bins/arm6",
      "pattern": "[url:value = 'http://176.65.148.97/bins/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858488/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78f9fefb-75e4-5bcd-9bc2-04786d8149aa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.97/bins/m68k",
      "pattern": "[url:value = 'http://176.65.148.97/bins/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858489/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c7c56db-5220-5d43-9013-2904924080fe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.97/bins/x86",
      "pattern": "[url:value = 'http://176.65.148.97/bins/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858490/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14b5258a-7612-5607-b286-5e96ebf8554b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.97/bins/mips",
      "pattern": "[url:value = 'http://176.65.148.97/bins/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858491/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f08d797a-5a52-5357-ac60-b686ca95ca6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.97/bins/arm",
      "pattern": "[url:value = 'http://176.65.148.97/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858492/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62f4d5d7-d49e-5be8-9957-ef315d22d805",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.97/bins/arm7",
      "pattern": "[url:value = 'http://176.65.148.97/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858493/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7932daad-bbe7-501f-8ec7-f79af1b05785",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.148.97/bins/ppc",
      "pattern": "[url:value = 'http://176.65.148.97/bins/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858487/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f059c886-b921-59ed-bee4-b92d99a345f6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://silvion.uk/fi/Fantas.inf",
      "pattern": "[url:value = 'https://silvion.uk/fi/Fantas.inf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858485/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea24e1d5-1362-5719-abe9-883cc5d761ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gomc.uk/pg/pg.js",
      "pattern": "[url:value = 'https://gomc.uk/pg/pg.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858486/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--400f26b8-6810-5bba-a4d5-6464332023db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.webangelo.it/kim/kim.bin",
      "pattern": "[url:value = 'https://www.webangelo.it/kim/kim.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858483/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--312261ae-287d-5e67-83ab-26f488da612e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gomc.uk/UCD/UCC.pdf",
      "pattern": "[url:value = 'https://gomc.uk/UCD/UCC.pdf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:42:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858484/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b64722f3-2d32-5e4d-a63d-02a7c66a0ee0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://photo-62454.cfd/",
      "pattern": "[url:value = 'http://photo-62454.cfd/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:39:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858482/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--235a4875-782d-537e-8885-252cb098f5b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://hubsecure.info/",
      "pattern": "[url:value = 'http://hubsecure.info/']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:39:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858481/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bc03a2f-dcad-5b83-a838-ed5607718f0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sterich.online/a/bin.dat",
      "pattern": "[url:value = 'https://sterich.online/a/bin.dat']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:38:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858480/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05f99666-cfe2-5b3a-9197-75d41564c3a9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ecomarkperu.com/ggggggggggggggggg.ps1",
      "pattern": "[url:value = 'https://ecomarkperu.com/ggggggggggggggggg.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:38:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858479/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bf6f838-5c26-5827-beff-27ee75cf1be2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://www.websenorllc.com/wordpress/jbcrdFS.txt",
      "pattern": "[url:value = 'https://www.websenorllc.com/wordpress/jbcrdFS.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:37:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858478/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a2adb00-67bb-543d-9364-2d5c93095cdc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://paste.sensio.no/RovingRandy",
      "pattern": "[url:value = 'https://paste.sensio.no/RovingRandy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858477/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--814eceae-72cd-5c94-b570-aae9b97f3f34",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.113.43.94:45113/bin.sh",
      "pattern": "[url:value = 'http://182.113.43.94:45113/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:36:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858476/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17204fba-7ebb-5fb9-a96b-e915a4c0c06e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://inervadores.life/enter/stego_payload.png",
      "pattern": "[url:value = 'https://inervadores.life/enter/stego_payload.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:36:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858475/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a12eda12-7886-5661-a8d7-15e15967af28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://files.catbox.moe/bopqmq.ps1",
      "pattern": "[url:value = 'https://files.catbox.moe/bopqmq.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858474/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd9f9a87-98b1-592e-8fcd-5125fca81d52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.177.231.62:58156/bin.sh",
      "pattern": "[url:value = 'http://42.177.231.62:58156/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:34:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858473/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b82af8df-2f22-5919-b003-0764bc26a3e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://progroup.top//grabme/stub.ps1",
      "pattern": "[url:value = 'https://progroup.top//grabme/stub.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:34:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858472/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1d6abce-ea3c-5040-b9df-23200b628cb3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://180.20.254.41:60925/Mozi.m",
      "pattern": "[url:value = 'http://180.20.254.41:60925/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:33:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858471/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c87fb73-6c71-5ca6-866e-de1e928c9fe0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1Vj3YX2UwqWmV3OD6NiXQa6Z7GbWDZS9z",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1Vj3YX2UwqWmV3OD6NiXQa6Z7GbWDZS9z']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:33:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858468/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7752620d-be26-5c92-a164-c7c12b75704d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1fro4tdyaJ_lmQ0XHmXtLLMq6lj3r04Bw",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1fro4tdyaJ_lmQ0XHmXtLLMq6lj3r04Bw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:33:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858469/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7da2fbe-5b31-54d4-8eba-193db61b8994",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1NuQ93aP9qLsXLXoguMZjwV3EcNkCy2CW",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1NuQ93aP9qLsXLXoguMZjwV3EcNkCy2CW']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:33:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858470/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3820487-d48c-515e-a5a0-9b53811c0787",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://res.cloudinary.com/dpk0sbpsx/image/upload/v1780468521/img_233448_rg8vd6.jpg",
      "pattern": "[url:value = 'https://res.cloudinary.com/dpk0sbpsx/image/upload/v1780468521/img_233448_rg8vd6.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:33:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858467/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f85b0a6-bf87-54c4-9658-dda084a02817",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=13QM47n4TKEemhxMzsLWC8esrz60itk-r",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=13QM47n4TKEemhxMzsLWC8esrz60itk-r']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:32:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858466/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d944d656-7b93-50f2-9dde-fc8fd265af7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1ZYG14Rkv6r02Sp4JQc0lbbCbKP9tHaSo",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1ZYG14Rkv6r02Sp4JQc0lbbCbKP9tHaSo']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:32:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858463/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7578c697-5a0d-582d-a6b6-445ac72e7240",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1f_b2yVl_g3exwLPnRqZnwnCYbMSpfe7P",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1f_b2yVl_g3exwLPnRqZnwnCYbMSpfe7P']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:32:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858464/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--642b234e-1dc9-54d8-8c7a-8304014dcad2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1RrfTr30qYyhi17TimrOv6ylE7GLsbEmk",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1RrfTr30qYyhi17TimrOv6ylE7GLsbEmk']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:32:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858465/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--283785ac-5170-5ed9-b45f-b0f98b2d1a39",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://drive.google.com/uc?export=download&id=1hL3E50kb0CtdWKAAxZnBKrANwLJNRvsY",
      "pattern": "[url:value = 'https://drive.google.com/uc?export=download&id=1hL3E50kb0CtdWKAAxZnBKrANwLJNRvsY']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:31:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858462/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--833f54d8-a6d1-5377-80d8-8d34dfe5d0d3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.22.13:49179/i",
      "pattern": "[url:value = 'http://123.9.22.13:49179/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858461/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd78d5e-8456-5c13-8c2e-76ed10a7b52c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://edgeviewruntime.com/App1.msi",
      "pattern": "[url:value = 'http://edgeviewruntime.com/App1.msi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:26:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858460/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bddd10b-b3f3-5c8d-9098-668f8c593276",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://newmans.it.com/UCCRFQ/UCC.pdf",
      "pattern": "[url:value = 'https://newmans.it.com/UCCRFQ/UCC.pdf']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:24:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858458/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a4a693e-9b8a-5a24-8242-a293a6406323",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://newmans.it.com/gs/ms.js",
      "pattern": "[url:value = 'https://newmans.it.com/gs/ms.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:24:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858459/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26f046cc-4e5a-58d6-a7e1-4a6e9e436c10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/tools/pnscan.tar",
      "pattern": "[url:value = 'https://s.littleshabby.net/tools/pnscan.tar']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858454/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d1ac874-5712-50ee-9486-846b6faaa67f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/tools/masscan-1.0.4.tar.gz",
      "pattern": "[url:value = 'http://s.littleshabby.net/tools/masscan-1.0.4.tar.gz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858455/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f00001f8-2b77-592a-8cb1-71697745700b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/tools/masscan-1.0.4.tar.gz",
      "pattern": "[url:value = 'https://s.littleshabby.net/tools/masscan-1.0.4.tar.gz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858456/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42609f53-b027-54c3-85ef-a2ce9ee0b04b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/tools/pnscan.tar",
      "pattern": "[url:value = 'http://s.littleshabby.net/tools/pnscan.tar']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:23:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858457/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4656ea44-9a43-53b4-bed0-7bf4e5978b0c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://t7gjz81d.bet360pro.bet/?ublib=f37497a2-61d1-468a-ba39-d842fe0ad2c1",
      "pattern": "[url:value = 'https://t7gjz81d.bet360pro.bet/?ublib=f37497a2-61d1-468a-ba39-d842fe0ad2c1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:22:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858453/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7318f8ec-8de2-5ab7-a9b1-41a023d51768",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.tradedsglobal.com/yuyu/yu20th.png",
      "pattern": "[url:value = 'http://www.tradedsglobal.com/yuyu/yu20th.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:19:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858452/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d593be0c-f575-5b31-9e17-134a97a965b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://kpmmg.org//common/caches/june.png",
      "pattern": "[url:value = 'http://kpmmg.org//common/caches/june.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858450/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f19987fb-5be6-57c8-bdc5-b0a194e8232d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://www.tradedsglobal.com/yuyu/rump20th.png",
      "pattern": "[url:value = 'http://www.tradedsglobal.com/yuyu/rump20th.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:19:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858451/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5a39a48-56cb-5611-ba92-dfc01004ee89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://kpmmg.org//common/caches/optimized.png",
      "pattern": "[url:value = 'http://kpmmg.org//common/caches/optimized.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:19:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858449/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1583bef5-6a2e-5cd9-8c2f-f64cb70ae040",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://194.87.24.96/Folkting.asi",
      "pattern": "[url:value = 'http://194.87.24.96/Folkting.asi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:18:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858448/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--580fc4a0-3233-5602-b53c-39d002cd470f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://194.87.24.96/nRnYBIe147.rar",
      "pattern": "[url:value = 'http://194.87.24.96/nRnYBIe147.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:18:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858447/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a710899f-4cb1-549c-aaac-b77f28342d25",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.173.159.67:46603/bin.sh",
      "pattern": "[url:value = 'http://175.173.159.67:46603/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:17:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858446/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da30ee9f-1d66-5a6d-99ef-5935277fe1d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cmzgymj.betobet90.com/d82fafeb-e737-4d0b-bd8a-e58d4cdb2d0c",
      "pattern": "[url:value = 'https://cmzgymj.betobet90.com/d82fafeb-e737-4d0b-bd8a-e58d4cdb2d0c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:04:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858445/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d639b4b-ea9a-5b5b-850d-c02119b72356",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_16447db4987d422f.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_16447db4987d422f.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T09:00:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858444/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9b43a8d-d5ad-5b39-8c98-4b1e0cdb394e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.94.54:57173/i",
      "pattern": "[url:value = 'http://125.40.94.54:57173/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:41:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858443/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9bd7919-7d40-5a53-b706-18454e3b2fd3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bkbopol.betlikegirisi.com/708680ca-ef9f-4d93-954e-fa3c3f87c333",
      "pattern": "[url:value = 'https://bkbopol.betlikegirisi.com/708680ca-ef9f-4d93-954e-fa3c3f87c333']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858441/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--638e8da3-e99e-5515-b236-447c1bf015e9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.214.156.192:60744/i",
      "pattern": "[url:value = 'http://221.214.156.192:60744/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858442/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e8ace7d-01fe-5f0b-afba-c35743c1e2db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.60.210.174:49167/i",
      "pattern": "[url:value = 'http://115.60.210.174:49167/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:31:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858439/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b169c82e-377a-5541-ba93-f269bc7a3c46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.151.82:36077/i",
      "pattern": "[url:value = 'http://182.117.151.82:36077/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:31:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858440/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad577e83-ed8b-5d60-b8cb-350bf34e6d32",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hsh1serverboarding.xyz/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",
      "pattern": "[url:value = 'https://hsh1serverboarding.xyz/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:24:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858438/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69b65a50-23d6-5039-a374-076e88780be0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.5.18.41:39355/bin.sh",
      "pattern": "[url:value = 'http://42.5.18.41:39355/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:23:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858437/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37315e4b-89f5-5db9-8355-7b82ea4d6ec8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.90.238:43525/i",
      "pattern": "[url:value = 'http://42.235.90.238:43525/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:14:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858436/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--756fae76-38fe-5437-b9ed-c3bce496bff6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.214.156.192:60744/bin.sh",
      "pattern": "[url:value = 'http://221.214.156.192:60744/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858435/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c259b81b-4622-58d3-bf22-4e28d5d1d76e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.183.223:58496/i",
      "pattern": "[url:value = 'http://222.138.183.223:58496/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858434/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e776bee-478a-5127-8e80-70aee50d0af9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.155.200.53:60030/i",
      "pattern": "[url:value = 'http://219.155.200.53:60030/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:11:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858433/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41dd48cf-a0ba-58e2-8dd8-37814b577d0d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.186.126:41884/bin.sh",
      "pattern": "[url:value = 'http://27.202.186.126:41884/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:10:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858432/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b49e735c-cf55-5c0e-8d11-b94138cdf4bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.60.210.174:49167/bin.sh",
      "pattern": "[url:value = 'http://115.60.210.174:49167/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:05:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858431/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--673f4168-0b2c-55fa-a5a6-f797b5b3ac69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://58.241.53.73:33145/i",
      "pattern": "[url:value = 'http://58.241.53.73:33145/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:02:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858430/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a5ad1fa-2f26-5d19-a19a-f4376ceb8986",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.24.172:32963/i",
      "pattern": "[url:value = 'http://110.36.24.172:32963/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T08:01:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858429/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1129f211-4342-5552-9aed-b301d0fb211e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zthnnrr.betistmobil.com/f627ed93-abf3-4c95-bf9a-ffe62ac65b54",
      "pattern": "[url:value = 'https://zthnnrr.betistmobil.com/f627ed93-abf3-4c95-bf9a-ffe62ac65b54']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:56:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858428/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aad4b727-c38e-58e8-9283-b49a663239b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.90.148.15:58726/i",
      "pattern": "[url:value = 'http://39.90.148.15:58726/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:48:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858427/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d66fbd4f-54ea-54fe-ab35-388a03134aca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.183.223:58496/bin.sh",
      "pattern": "[url:value = 'http://222.138.183.223:58496/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858426/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a2268e8-7599-5530-a566-411e3e99d8cb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.90.238:43525/bin.sh",
      "pattern": "[url:value = 'http://42.235.90.238:43525/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:45:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858425/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3480e2d3-0ee4-58da-8e22-bfd89849113c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.227.34.161:32923/bin.sh",
      "pattern": "[url:value = 'http://42.227.34.161:32923/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:45:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858424/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ca83483-cf73-5a1d-b430-364e55fc501d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.127.71.141:60996/i",
      "pattern": "[url:value = 'http://222.127.71.141:60996/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:42:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858423/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--210e688b-0f06-5612-be0d-f57eb4ab4c9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://58.241.53.73:33145/bin.sh",
      "pattern": "[url:value = 'http://58.241.53.73:33145/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858422/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ba991d3-05fd-5289-85fb-ef3c0b362a6e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.252.4:60464/i",
      "pattern": "[url:value = 'http://123.14.252.4:60464/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:31:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858421/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9278a2a6-346e-52b3-b14f-9daca75156ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tmcksa.com/IMGO/optimized_MSI.png",
      "pattern": "[url:value = 'https://tmcksa.com/IMGO/optimized_MSI.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:27:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858420/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faf6e865-8cf6-59e7-a16d-fe8398ebdca8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-f36b05599c3043ddb16520acf6cc3cce.r2.dev/img_133443.png",
      "pattern": "[url:value = 'https://pub-f36b05599c3043ddb16520acf6cc3cce.r2.dev/img_133443.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:27:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858419/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--debee40a-dd66-5936-8005-c7bc878fd496",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/cEWiw",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/cEWiw']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858418/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c577300-5fb4-528a-a9a9-cb9de3c1d53b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.127.71.141:60996/bin.sh",
      "pattern": "[url:value = 'http://222.127.71.141:60996/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:25:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858417/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0756638-1f92-5825-baea-7cb9cd4ddf1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sandyadamspodcast.com/Smx1.exe",
      "pattern": "[url:value = 'https://sandyadamspodcast.com/Smx1.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:25:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858416/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--604025ed-4fd6-590f-ad76-b59ab008df9e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mediafacundo.varascundo.com/wp-includes/Requests/src/stubppp.ps1",
      "pattern": "[url:value = 'https://mediafacundo.varascundo.com/wp-includes/Requests/src/stubppp.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858415/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39487499-ee3c-562e-849b-23760d33bf8c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.90.148.15:58726/bin.sh",
      "pattern": "[url:value = 'http://39.90.148.15:58726/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:24:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858414/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bad09d6-6ef4-5111-bbe6-e7cbcf0fa6a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ty7zctpt.bet303casino.com/?ublib=7ef1e1c4-7db5-40c0-955f-c7fde7263248",
      "pattern": "[url:value = 'https://ty7zctpt.bet303casino.com/?ublib=7ef1e1c4-7db5-40c0-955f-c7fde7263248']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:22:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858413/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06e86c94-210d-52f8-bbf6-b8291b19ccdf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.11.48:53906/i",
      "pattern": "[url:value = 'http://125.45.11.48:53906/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:21:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858412/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c36c272b-b771-5a1e-bc2c-48f85f642f7b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://corwineagles.com/stego_payload.png",
      "pattern": "[url:value = 'https://corwineagles.com/stego_payload.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:21:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858411/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--890a978a-d878-5828-a236-d2298b73593a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.24.172:32963/bin.sh",
      "pattern": "[url:value = 'http://110.36.24.172:32963/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:19:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858410/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14976c43-b5ee-576b-883d-e44e1f25fe8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vrdccbank.com/kidda.exe",
      "pattern": "[url:value = 'https://vrdccbank.com/kidda.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:18:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858409/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee969638-9082-5d2c-a940-5a3488722f95",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://solar-sanat.net/EaglesTitan001.exe",
      "pattern": "[url:value = 'https://solar-sanat.net/EaglesTitan001.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:17:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858408/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f75e718-ce98-5b70-a18a-d51d011bed74",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wezdgtt.betistcomgiris.com/7b6912c6-c596-4261-9517-595ff8ea7f14",
      "pattern": "[url:value = 'https://wezdgtt.betistcomgiris.com/7b6912c6-c596-4261-9517-595ff8ea7f14']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:15:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858407/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c406d69-f746-590e-95c9-75bfedd6afec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://res.cloudinary.com/dukqjhicy/image/upload/v1780541824/img_195534_bvj0ui.jpg",
      "pattern": "[url:value = 'https://res.cloudinary.com/dukqjhicy/image/upload/v1780541824/img_195534_bvj0ui.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:13:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858406/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ccfda41-dfbc-5d65-81c4-0f9d46bbe212",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.103.82:38888/i",
      "pattern": "[url:value = 'http://61.53.103.82:38888/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858404/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9dd7a04-c976-5db2-8c7e-a0fd5e6909be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://114.227.38.235:3990/i",
      "pattern": "[url:value = 'http://114.227.38.235:3990/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858405/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1ec1e55-051e-51e7-b911-6e6b4496da7d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/pearl-miner",
      "pattern": "[url:value = 'https://s.littleshabby.net/pearl-miner']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858403/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4f2ad29-77a0-5a89-9935-67294c57f258",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/zzh",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/zzh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858401/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e1c91fd-5496-52b9-ac5c-b2261a0e4722",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/pearl-miner",
      "pattern": "[url:value = 'http://s.littleshabby.net/pearl-miner']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858402/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--606489ac-818b-525b-893e-8bd90c4c4bb5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/indexi.png",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/indexi.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858400/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4478c3b3-c95b-5663-9cf7-abc48bd57e6d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/xmrig-linux",
      "pattern": "[url:value = 'https://s.littleshabby.net/xmrig-linux']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858398/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1e93441-a228-5345-95af-8ae38441aa78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/indexis.png",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/indexis.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858399/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0667ff67-e17b-598e-a135-d277a701ced7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/indexi.png",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/indexi.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858397/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9926dcfd-5467-527c-8cd1-6b4f6f57f9c7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/xmrig-linux",
      "pattern": "[url:value = 'http://s.littleshabby.net/xmrig-linux']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858395/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc505d90-21e1-55b2-9199-8e8304d9d267",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/zzh",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/zzh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858396/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c24853a3-d70a-5084-a46f-c86997eb3fc6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.45.11.48:53906/bin.sh",
      "pattern": "[url:value = 'http://125.45.11.48:53906/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858394/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dbfb8e6-820a-5ed3-802b-1e2fb49c89ec",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/indexrs.png",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/indexrs.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858389/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b920dbae-29e5-5c2f-9b64-5fe06bfc68f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/indexrs.png",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/indexrs.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858390/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b21f6b86-b891-5fe1-92ac-23f77567e45f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/indexni.png",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/indexni.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858391/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5908a1d-1abe-59a2-b029-d1b2a52e69c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/indexis.png",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/indexis.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858392/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a95fccde-2bd5-5630-9f3c-dbe54ba4f3c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/indexni.png",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/indexni.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:11:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858393/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f625f95c-8dc5-537f-9e99-74627933e5ba",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/rs.sh",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/rs.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858387/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0768a44-9c4d-5dc4-964a-2774998c045d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hhhhh.fwh.is/img_234649.png",
      "pattern": "[url:value = 'https://hhhhh.fwh.is/img_234649.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858388/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e9aae62-bb08-55f5-8ef9-7f93f2957f13",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/set_simple.sh",
      "pattern": "[url:value = 'https://s.littleshabby.net/set_simple.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858386/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22656b53-6c68-5a06-9568-71a68de964be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/rs.sh",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/rs.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858379/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4246ea91-93c3-55e7-969d-40434ad8bba7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/is.sh",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/is.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858380/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05e53d49-d323-5e38-aa42-9d18f71dc9a1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/init.sh",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/init.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858381/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90a08ad3-669f-5246-ad0f-775e269ebb3e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/newinit.sh",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/newinit.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858382/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ebf9e67-c785-5486-9669-129065436a08",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/newinit.sh",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/newinit.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858383/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dac03d3-f061-5de0-8bb0-10b2df5f3eb6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/payloads/is.sh",
      "pattern": "[url:value = 'http://s.littleshabby.net/payloads/is.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858384/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43c0b3c3-f68e-5dae-a890-eba78a9facd0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/payloads/init.sh",
      "pattern": "[url:value = 'https://s.littleshabby.net/payloads/init.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858385/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4ab8520-06eb-5098-94a6-48d374660393",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/set_simple.sh",
      "pattern": "[url:value = 'http://s.littleshabby.net/set_simple.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858376/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd05ca31-c015-54d8-b5ce-d0be63a6f3fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://s.littleshabby.net/set.sh",
      "pattern": "[url:value = 'http://s.littleshabby.net/set.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858377/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c71ac7f3-42eb-53d8-b117-782ae8755297",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://s.littleshabby.net/set.sh",
      "pattern": "[url:value = 'https://s.littleshabby.net/set.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858378/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d75a2417-5ae9-52fc-add0-a0fcd4caefc3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/WrkWF",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/WrkWF']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:10:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858375/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2cef4df-ee48-5958-a12a-e984540a4b0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://res.cloudinary.com/dukqjhicy/image/upload/v1780541932/img_195827_okj88q.jpg",
      "pattern": "[url:value = 'https://res.cloudinary.com/dukqjhicy/image/upload/v1780541932/img_195827_okj88q.jpg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:09:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858374/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60e6e0fb-6247-5caf-87d3-5eb99b1c5f9d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.61.150.125/wem/img_000209.png",
      "pattern": "[url:value = 'http://45.61.150.125/wem/img_000209.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:06:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858373/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8baa98e4-e3e6-5f48-a283-18942ae8cdbd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.61.150.125/wem/img_113747.png",
      "pattern": "[url:value = 'http://45.61.150.125/wem/img_113747.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:06:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858372/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a592b27f-290e-5d50-addd-ef44170f6349",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/tVQPT",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/tVQPT']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:06:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858371/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b96eda36-eda3-51a3-9117-865d7f1c67ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/TdaTm",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/TdaTm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:06:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858370/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f40c6f19-9c51-5096-88b6-f470a8687c89",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pub-f36b05599c3043ddb16520acf6cc3cce.r2.dev/img_174531.png",
      "pattern": "[url:value = 'https://pub-f36b05599c3043ddb16520acf6cc3cce.r2.dev/img_174531.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858369/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ee49c4d-411a-5e74-bb62-1e07ef0d3b8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/pKTrG",
      "pattern": "[url:value = 'https://icy-lab-0431.guilherme-telecomunicacoes2024.workers.dev/pKTrG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:05:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858368/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35a6df1f-3112-5af1-8b69-ff44f22c1ab8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hhhhh.fwh.is/img_165545.png",
      "pattern": "[url:value = 'https://hhhhh.fwh.is/img_165545.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:05:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858367/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f653c09f-3f12-597e-a3c1-3eaba4f7eb9f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cxgbphg.betgopro.com/4f123d5a-fb1b-4004-9266-27e69dfd41c4",
      "pattern": "[url:value = 'https://cxgbphg.betgopro.com/4f123d5a-fb1b-4004-9266-27e69dfd41c4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:05:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858366/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81f2f7da-44ed-589e-bb71-2e5ba16c36b9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://small-morning-8be0.fsocietyandtools.workers.dev/QQIB-J3OB-PICL-3175/img_e8p1t3.png",
      "pattern": "[url:value = 'https://small-morning-8be0.fsocietyandtools.workers.dev/QQIB-J3OB-PICL-3175/img_e8p1t3.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:04:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858365/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4faf06a1-39be-5855-8092-287501cc7fa3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://small-morning-8be0.fsocietyandtools.workers.dev/QQIB-J3OB-PICL-3175/img_id20y0.png",
      "pattern": "[url:value = 'https://small-morning-8be0.fsocietyandtools.workers.dev/QQIB-J3OB-PICL-3175/img_id20y0.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858363/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c40e8e9-7d2b-58c8-b541-c26a0d282e36",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cstaipas.pt/encrypt/Client.exe",
      "pattern": "[url:value = 'https://cstaipas.pt/encrypt/Client.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:04:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858364/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c301497b-c8c4-5d14-8725-3bcaf46d7913",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://importersexportersinc.com/kBPluThfi48.bin",
      "pattern": "[url:value = 'https://importersexportersinc.com/kBPluThfi48.bin']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:02:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858361/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa2f872a-3641-54e8-a880-26fa6af37d09",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.14.252.4:60464/bin.sh",
      "pattern": "[url:value = 'http://123.14.252.4:60464/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:02:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858362/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0741ce06-82a6-57a3-b63d-4fbc5889123b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://importersexportersinc.com/Fyldor.u32",
      "pattern": "[url:value = 'https://importersexportersinc.com/Fyldor.u32']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:02:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858360/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba28167e-4122-5dcc-9896-fe8e5b73b32c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.198.224.42/e.mips",
      "pattern": "[url:value = 'http://45.198.224.42/e.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T07:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858359/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21751acb-f1c7-5979-bfdb-89d28da61c22",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bijmduj.betforward.now/5184f8da-c551-4fc1-8e25-11babf5fa049",
      "pattern": "[url:value = 'https://bijmduj.betforward.now/5184f8da-c551-4fc1-8e25-11babf5fa049']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:59:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858358/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f5aa8a2-ccdc-561d-be5e-fe87e2ab6d72",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.75.130:34625/i",
      "pattern": "[url:value = 'http://222.137.75.130:34625/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:53:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858357/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84c5d190-8dad-5890-be66-1f0580b2db69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://114.227.38.235:3990/bin.sh",
      "pattern": "[url:value = 'http://114.227.38.235:3990/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:52:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858356/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b74c0dd-53a5-52af-8b72-3930d43bf284",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.5.108.94:57039/i",
      "pattern": "[url:value = 'http://42.5.108.94:57039/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858354/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8449d12c-445f-5ea1-bc39-80a4f360c067",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.206.84.69:60428/i",
      "pattern": "[url:value = 'http://27.206.84.69:60428/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:52:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858355/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2737a68d-ac77-56a7-8482-6790d2dfd26f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.5.108.94:57039/bin.sh",
      "pattern": "[url:value = 'http://42.5.108.94:57039/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:42:09Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858353/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--955823d4-f62c-56ba-9ecd-dbe653543999",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.50.107:32775/i",
      "pattern": "[url:value = 'http://182.114.50.107:32775/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:37:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858352/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04b37fa4-4971-50c5-a4bc-dfdd0ca79e46",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.137.75.130:34625/bin.sh",
      "pattern": "[url:value = 'http://222.137.75.130:34625/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:21:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858351/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9aa5b67b-68d5-59c0-8d87-f88bccfe59f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://mcqkkmc.betfootbal90.com/013f26b1-8fc0-40be-bdc5-bace41214b70",
      "pattern": "[url:value = 'https://mcqkkmc.betfootbal90.com/013f26b1-8fc0-40be-bdc5-bace41214b70']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:17:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858350/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ede1a782-572e-5917-9e9f-dc34a42a453d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.22.151:37340/i",
      "pattern": "[url:value = 'http://182.117.22.151:37340/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858349/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51efa9ff-edac-539a-88f9-e134f950931a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/211/img_022106.png",
      "pattern": "[url:value = 'http://104.168.115.123/211/img_022106.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:16:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858348/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8dd2472-b6e6-5782-aca4-da5f20431bdd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/211/wemadebstthingsforbetterpeoplesar.hta",
      "pattern": "[url:value = 'http://104.168.115.123/211/wemadebstthingsforbetterpeoplesar.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:16:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858347/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce075153-6ed0-546e-82be-304a86969055",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://172.245.209.218/50/img_174257.png",
      "pattern": "[url:value = 'http://172.245.209.218/50/img_174257.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:14:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858346/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c52712b-0aed-526c-9f24-bcd6641b3644",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://172.245.209.218/50/goodcommunicationskillforbestpersonhave.hta",
      "pattern": "[url:value = 'http://172.245.209.218/50/goodcommunicationskillforbestpersonhave.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:14:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858345/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d413bf8-1721-5ba1-954d-546b9b3c984f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/350/wesiwhsbesttingswithbetterwaysgivne.js",
      "pattern": "[url:value = 'http://104.168.115.123/350/wesiwhsbesttingswithbetterwaysgivne.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:12:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858344/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f48932d0-3fd4-5fd7-9b04-c56e51097ab1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://104.168.115.123/350/wes/soombestthingsfrobetteplace.hta",
      "pattern": "[url:value = 'http://104.168.115.123/350/wes/soombestthingsfrobetteplace.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:12:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858343/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abd6576f-4b43-5f00-9fc8-374182704962",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.50.107:32775/bin.sh",
      "pattern": "[url:value = 'http://182.114.50.107:32775/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858342/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27acd691-17c1-5932-a739-da665ef60037",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/40/seetehbestthingsforbestkinfsforhifhgoodthings.js",
      "pattern": "[url:value = 'http://107.172.13.211/40/seetehbestthingsforbestkinfsforhifhgoodthings.js']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858341/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b720926c-9feb-5452-ac89-50c0791689f0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://107.172.13.211/40/ec/goodthingsformebestfeelthingswids.hta",
      "pattern": "[url:value = 'http://107.172.13.211/40/ec/goodthingsformebestfeelthingswids.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:11:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858340/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--167d5ea7-5c26-5a21-86ec-8bfcec408c55",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://172.245.209.218/70/img_080039.png",
      "pattern": "[url:value = 'http://172.245.209.218/70/img_080039.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:10:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858339/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f6ec9d2-9f38-5d1d-8eaa-91ddf761515f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://172.245.209.218/70/besttingswithbetterplacestounderstand.hta",
      "pattern": "[url:value = 'http://172.245.209.218/70/besttingswithbetterplacestounderstand.hta']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:10:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858338/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8496406-4e2a-57ab-b796-e19733230fd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://timely-puffpuff-dc7879.netlify.app/ssr.txt",
      "pattern": "[url:value = 'https://timely-puffpuff-dc7879.netlify.app/ssr.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:08:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858337/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c5523e1-9dfb-542a-a366-3a36d62e21b6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://timely-puffpuff-dc7879.netlify.app/tusop.txt",
      "pattern": "[url:value = 'https://timely-puffpuff-dc7879.netlify.app/tusop.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:08:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858336/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35fbcdfc-acd8-5670-9f6d-543879c663b0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.9.246.153:46455/i",
      "pattern": "[url:value = 'http://123.9.246.153:46455/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T06:05:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858335/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59357d96-43c7-5e85-ba14-b8bd946e9085",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://elmap.smarthost.pl/index/caches/rumped_MSI.png",
      "pattern": "[url:value = 'http://elmap.smarthost.pl/index/caches/rumped_MSI.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:54:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858334/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--117be24d-a622-575a-96ed-8c897c3b20e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://elmap.smarthost.pl/index/caches/optimized.png",
      "pattern": "[url:value = 'http://elmap.smarthost.pl/index/caches/optimized.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:53:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858333/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--699268ff-6852-5148-988b-ece14137986e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://elmap.smarthost.pl/index/caches/xwbin.png",
      "pattern": "[url:value = 'http://elmap.smarthost.pl/index/caches/xwbin.png']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:53:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858332/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b379475d-3319-55d0-8550-ce42a2c326be",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://103.26.86.254:52094/Mozi.a",
      "pattern": "[url:value = 'http://103.26.86.254:52094/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858330/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--118c6968-deb3-5eee-a2d0-245c525feda2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://72.255.3.219:57338/Mozi.m",
      "pattern": "[url:value = 'http://72.255.3.219:57338/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858331/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--066401f4-a644-5edf-ad04-cf6701f12746",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.160.147:44269/Mozi.m",
      "pattern": "[url:value = 'http://182.121.160.147:44269/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858325/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de109775-5489-524d-96e7-d22fbe054e56",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://139.135.45.181:33772/Mozi.a",
      "pattern": "[url:value = 'http://139.135.45.181:33772/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858326/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37c7c7f2-64a5-56d3-8652-96900cd681d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://223.123.44.117:34414/Mozi.a",
      "pattern": "[url:value = 'http://223.123.44.117:34414/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858327/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdb7e2d9-f23f-5d21-9722-98bf97296281",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.42.75.111:38182/Mozi.a",
      "pattern": "[url:value = 'http://115.42.75.111:38182/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858328/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb2783e1-1acb-5d39-b0d9-d363866d4b2e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://59.103.106.182:39713/Mozi.a",
      "pattern": "[url:value = 'http://59.103.106.182:39713/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858329/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4dcf1b2-7b96-52c9-a0f7-74b96ed4c071",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://190.196.250.1:10147/Mozi.a",
      "pattern": "[url:value = 'http://190.196.250.1:10147/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858324/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d729b93d-47fc-53d2-bf6e-ddf5e9075caa",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://140.233.190.47/dlink%20-O%20-%3E%20/tmp/kh",
      "pattern": "[url:value = 'http://140.233.190.47/dlink%20-O%20-%3E%20/tmp/kh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:47:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858323/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23c8e1ac-e7bf-590e-97b7-dd8bf4779a66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.50.41:42003/Mozi.a",
      "pattern": "[url:value = 'http://110.37.50.41:42003/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:46:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858322/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83e2292b-7e26-53ea-bded-af406cffddf5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.56.142.229:46645/Mozi.m",
      "pattern": "[url:value = 'http://42.56.142.229:46645/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858319/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54dd168f-430f-5648-a026-76ca0235b3ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.200.219.36:34070/Mozi.a",
      "pattern": "[url:value = 'http://221.200.219.36:34070/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858320/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c73045c7-b7c8-5e5e-95d9-8e1e8941eaff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://101.108.3.228:40009/Mozi.a",
      "pattern": "[url:value = 'http://101.108.3.228:40009/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:46:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858321/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d9bec94-d364-5eb2-9674-a948fcae27e1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.25.33:56577/Mozi.m",
      "pattern": "[url:value = 'http://110.36.25.33:56577/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:46:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858318/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cc28ccb-16b3-5820-b2cb-5a31a9f741ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://193.46.217.187/curl.sh",
      "pattern": "[url:value = 'http://193.46.217.187/curl.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858316/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--484e7b2c-001b-554e-bffb-6c1425a3c55c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://193.46.217.187/wget.sh",
      "pattern": "[url:value = 'http://193.46.217.187/wget.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858317/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1d60e4e-e39b-5dd9-a2ac-171d69f7210b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://5.175.223.249/womp",
      "pattern": "[url:value = 'http://5.175.223.249/womp']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:45:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858315/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77d27543-debb-5b0a-bcc3-75107fcd669b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.198.224.42/n",
      "pattern": "[url:value = 'http://45.198.224.42/n']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858313/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb04d461-d655-589d-afb8-957a6c8676bd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://195.96.132.13/x",
      "pattern": "[url:value = 'http://195.96.132.13/x']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:45:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858314/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8393220-c99c-571d-beae-95c0b5e2e6e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://sfmbqki.betfa90.net/154d2797-7ba2-4938-a2d0-861767fd647b",
      "pattern": "[url:value = 'https://sfmbqki.betfa90.net/154d2797-7ba2-4938-a2d0-861767fd647b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:42:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858312/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8db7bc36-5c24-5200-88d8-3223d3b3b980",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.156.63.222:49750/bin.sh",
      "pattern": "[url:value = 'http://219.156.63.222:49750/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:36:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858311/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--873e7b06-65bc-5628-b164-d8b7e467f92a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/i99",
      "pattern": "[url:value = 'http://188.132.232.81/i99']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858310/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3255e7ba-8152-517e-a6cb-4cbdad4bfcad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/0xFn",
      "pattern": "[url:value = 'http://188.132.232.81/0xFn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:28Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858309/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6388101-d203-52b6-8cd1-339c6d8027cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/TRO",
      "pattern": "[url:value = 'http://188.132.232.81/TRO']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858308/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cec3d201-cd9f-5a2d-8da4-b794afee49c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/OKFH",
      "pattern": "[url:value = 'http://188.132.232.81/OKFH']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858306/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45156b22-3aec-5bba-a342-560a0cade767",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/URl2",
      "pattern": "[url:value = 'http://188.132.232.81/URl2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:23Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858307/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d2d5ee4-548b-5c78-a9c9-1159278bf200",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/7zL",
      "pattern": "[url:value = 'http://188.132.232.81/7zL']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858302/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dbc207a-9935-5c5b-aee8-d3abc1fdfd78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/65j",
      "pattern": "[url:value = 'http://188.132.232.81/65j']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858303/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77a54aea-47ee-59a3-a61e-dc18021d3328",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://195.96.132.13/lul.arm5",
      "pattern": "[url:value = 'http://195.96.132.13/lul.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858304/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f3569d0-2f6e-55ac-b3e1-24d0346c2530",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://195.96.132.13/lul.arm7",
      "pattern": "[url:value = 'http://195.96.132.13/lul.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858305/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aab69850-e811-582f-bbd5-97f140b8b4c5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/SEoD",
      "pattern": "[url:value = 'http://188.132.232.81/SEoD']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858284/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abdf3c92-433a-54dd-834e-821a211a1b86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/sKW8",
      "pattern": "[url:value = 'http://188.132.232.81/sKW8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858285/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a24552cd-c028-576d-b949-a057e513d42d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/pxEu",
      "pattern": "[url:value = 'http://188.132.232.81/pxEu']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858286/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15dd0edc-f797-5ea1-b703-6473238952e7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ZVGz",
      "pattern": "[url:value = 'http://188.132.232.81/ZVGz']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858287/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27118eac-c7af-5679-8678-b2cc6ac74538",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://195.96.132.13/lul.arm",
      "pattern": "[url:value = 'http://195.96.132.13/lul.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858288/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48fe4a7a-d087-5c41-aaa5-3d3b7d69b63f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/qcU",
      "pattern": "[url:value = 'http://188.132.232.81/qcU']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858289/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d133011d-ffab-599f-a4f8-09a0ef29b05b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/8g7K",
      "pattern": "[url:value = 'http://188.132.232.81/8g7K']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858290/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffc39366-206a-5b60-a6fc-e7b787f04ec1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/T8R",
      "pattern": "[url:value = 'http://188.132.232.81/T8R']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858291/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c860f5ad-9edd-53dc-acdb-15b7ffb9efcd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/pok",
      "pattern": "[url:value = 'http://188.132.232.81/pok']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858292/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--032bf9be-3bc8-589f-bb8a-b8f794bad877",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/zVy",
      "pattern": "[url:value = 'http://188.132.232.81/zVy']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858293/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--459eaf5d-b5b2-545c-b9b2-381f9bfb0b7e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/m2L",
      "pattern": "[url:value = 'http://188.132.232.81/m2L']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858294/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7549a244-2f05-53b4-a41d-f78bf8f401bc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/mSD",
      "pattern": "[url:value = 'http://188.132.232.81/mSD']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858295/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12bdceff-3a8e-5d52-8e41-3da84562e2d4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/wZed",
      "pattern": "[url:value = 'http://188.132.232.81/wZed']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858296/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--732db68c-365a-588f-adc2-8b36d0631bc2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Tcc",
      "pattern": "[url:value = 'http://188.132.232.81/Tcc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858297/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e690bc2-a201-5f11-8d6f-2f1c49185ebf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/fs0",
      "pattern": "[url:value = 'http://188.132.232.81/fs0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858298/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d18c1ce0-d773-5a75-b312-108788cd9616",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/7j3",
      "pattern": "[url:value = 'http://188.132.232.81/7j3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858299/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4a68514-1810-530b-bf50-40b460f83a6b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/F9wU",
      "pattern": "[url:value = 'http://188.132.232.81/F9wU']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858300/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf9a7462-fdf9-509e-9108-d853833e1760",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/xr8",
      "pattern": "[url:value = 'http://188.132.232.81/xr8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858301/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acd34d27-a831-509b-b88b-e313fe2a89df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/02H",
      "pattern": "[url:value = 'http://188.132.232.81/02H']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858277/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11372302-03a1-53b5-a694-b71d884848a6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/uA5B",
      "pattern": "[url:value = 'http://188.132.232.81/uA5B']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858278/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17446f80-3e0f-56e4-b94f-10874c5bec9a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Ca9k",
      "pattern": "[url:value = 'http://188.132.232.81/Ca9k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858279/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08dc96ea-5d8c-5d23-9840-b28d31a1a32b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/kVG",
      "pattern": "[url:value = 'http://188.132.232.81/kVG']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858280/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d688321-0cdc-5784-8bbb-b586b9f25184",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ONM",
      "pattern": "[url:value = 'http://188.132.232.81/ONM']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858281/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e759f8-817f-571e-b543-04860a9ce3d5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/8leZ",
      "pattern": "[url:value = 'http://188.132.232.81/8leZ']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858282/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04735647-324d-5651-8f23-ef3b3d490e8f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/TG2W",
      "pattern": "[url:value = 'http://188.132.232.81/TG2W']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858283/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8e334ea-7846-5a0c-a7ee-94231c6a39b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/q7q",
      "pattern": "[url:value = 'http://188.132.232.81/q7q']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858268/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46c71782-d323-5b09-be63-ae7cbe05aeff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/eWa",
      "pattern": "[url:value = 'http://188.132.232.81/eWa']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858269/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0488028f-91be-5edd-a39a-12672ddbef94",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/v3ir",
      "pattern": "[url:value = 'http://188.132.232.81/v3ir']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858270/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f4df67e-bd6e-52c7-9b58-799107f6ad23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/xEi",
      "pattern": "[url:value = 'http://188.132.232.81/xEi']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858271/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc33503d-c832-515b-a691-5709152583ea",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/Nhx",
      "pattern": "[url:value = 'http://188.132.232.81/Nhx']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858272/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28c17d1b-f466-528d-ac83-0be33c8a8687",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/bzq",
      "pattern": "[url:value = 'http://188.132.232.81/bzq']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858273/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6ec152d-cdb4-57c9-8b28-8454cb301ebe",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ER9",
      "pattern": "[url:value = 'http://188.132.232.81/ER9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858274/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e0b0b3-593e-5313-951a-b2409d51d9cf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/oHnb",
      "pattern": "[url:value = 'http://188.132.232.81/oHnb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858275/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a080a54-106a-557b-8279-f08e2db9b4dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://188.132.232.81/ZXm",
      "pattern": "[url:value = 'http://188.132.232.81/ZXm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:28:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858276/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--022c65aa-6a21-5ec3-b5b9-66ac997215f2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gud6pt4u.bet212.casino/?ublib=86d981f1-ec8e-4f8c-8efe-f9f0d7afab1a",
      "pattern": "[url:value = 'https://gud6pt4u.bet212.casino/?ublib=86d981f1-ec8e-4f8c-8efe-f9f0d7afab1a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:22:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858267/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d00edcb8-5a80-5a23-ad97-26e2aa282e5a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.21.128:46010/i",
      "pattern": "[url:value = 'http://27.202.21.128:46010/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:18:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858266/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5f217b0-3788-5262-9dba-7ccbf24e91f1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_1b99aa43382fd479.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_1b99aa43382fd479.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:16:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858265/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ab265fa-610b-5f23-b542-613c063b9720",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://download.cavepay.app/CavePayWallet.exe",
      "pattern": "[url:value = 'https://download.cavepay.app/CavePayWallet.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:16:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858264/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--190379a2-0ef6-512f-8d43-a3ec66033bd4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_bd5d11d39f6a5724.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_bd5d11d39f6a5724.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:16:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858263/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--357f13ee-42f5-55e7-94d3-e6013c19e690",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tegbxmn.betebetwin.com/afc9c3f8-44ef-4d73-be52-c177cae04e90",
      "pattern": "[url:value = 'https://tegbxmn.betebetwin.com/afc9c3f8-44ef-4d73-be52-c177cae04e90']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:11:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858262/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0deb010-1de7-5ad5-8e96-e7eb1d131814",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zqhnvn.303-bet.xyz/b5074166-65d8-4097-a8ce-dcb7a92066b6",
      "pattern": "[url:value = 'https://zqhnvn.303-bet.xyz/b5074166-65d8-4097-a8ce-dcb7a92066b6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T05:05:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858261/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32f5cd7e-b49d-5f88-9ab2-a06f6fda6926",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.206.84.69:60428/bin.sh",
      "pattern": "[url:value = 'http://27.206.84.69:60428/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858260/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ac8b645-94be-5c4e-8e00-122a56325657",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.21.128:46010/bin.sh",
      "pattern": "[url:value = 'http://27.202.21.128:46010/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:50:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858259/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7549e6e3-5f68-506d-b808-4f62e536981b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.88.91:35864/i",
      "pattern": "[url:value = 'http://182.126.88.91:35864/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:47:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858258/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f432166-12d8-524c-89ab-1b491d71fc23",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.37.11:50863/i",
      "pattern": "[url:value = 'http://42.228.37.11:50863/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:41:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858257/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f57b0f40-d539-5677-b870-ed03498888ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://112.248.103.32:46711/i",
      "pattern": "[url:value = 'http://112.248.103.32:46711/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:36:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858256/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4fef87c-840f-53e0-aa46-e669e90d81df",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://emkilzh.betcityiran.com/ab0a0b6b-2cc2-4a4f-827e-98ab18eb1c06",
      "pattern": "[url:value = 'https://emkilzh.betcityiran.com/ab0a0b6b-2cc2-4a4f-827e-98ab18eb1c06']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:32:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858255/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea66f8c1-f51d-5b2e-aa2c-293f95cc96ac",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.162.203.214:42723/i",
      "pattern": "[url:value = 'http://61.162.203.214:42723/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:30:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858254/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--985d0e09-a596-59f1-a9fc-e9a26e271970",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.190.91:57272/bin.sh",
      "pattern": "[url:value = 'http://182.112.190.91:57272/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:27:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858253/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e07c761-90ee-5255-bcf9-650c24a6472a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.37.11:50863/bin.sh",
      "pattern": "[url:value = 'http://42.228.37.11:50863/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:21:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858252/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b52e8c9-cd3e-5264-bdb1-333612962a4a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.91.236:52594/bin.sh",
      "pattern": "[url:value = 'http://61.53.91.236:52594/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T04:16:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858251/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4310520-4730-578c-ad2c-2c4419de25ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vnacwzz.basketballiran.app/41c63a1c-c2ea-450c-9212-020c9d13a3e8",
      "pattern": "[url:value = 'https://vnacwzz.basketballiran.app/41c63a1c-c2ea-450c-9212-020c9d13a3e8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:55:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858250/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35db8e07-dea5-5a01-a3f1-9f22f6223011",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://04gzr1uh.alternatifdekorasyon.com/?ublib=c95ea92c-fd4c-42a5-acb8-0325b411a4d3",
      "pattern": "[url:value = 'https://04gzr1uh.alternatifdekorasyon.com/?ublib=c95ea92c-fd4c-42a5-acb8-0325b411a4d3']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:53:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858249/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--093621e1-7c5d-5f1e-abe5-c02d90a44c0a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.214.254:34574/i",
      "pattern": "[url:value = 'http://115.57.214.254:34574/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:52:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858248/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3dd77c9a-a0a3-5bda-938d-95dc1a5afbb1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.103.82:38888/bin.sh",
      "pattern": "[url:value = 'http://61.53.103.82:38888/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:48:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858247/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e11d89d-752b-5f9c-bd9d-110386524d69",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.57.214.254:34574/bin.sh",
      "pattern": "[url:value = 'http://115.57.214.254:34574/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:46:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858246/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a78a5d3-c43b-50ca-b84e-1c5006fe5d4f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.36.86.83:36205/bin.sh",
      "pattern": "[url:value = 'http://110.36.86.83:36205/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:46:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858245/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af03c6da-347f-510c-a361-767a346ee091",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.14.213:45490/i",
      "pattern": "[url:value = 'http://123.11.14.213:45490/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:37:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858244/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3514fc56-8568-5945-b126-65efc71506d9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://nllyafb.basketballbet.org/6022414e-b659-4ee0-a5ef-62d2e2b05b4b",
      "pattern": "[url:value = 'https://nllyafb.basketballbet.org/6022414e-b659-4ee0-a5ef-62d2e2b05b4b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:24:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858243/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66d3f49b-f781-5ddd-bb36-e2d21630c745",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://db7orl54.bet120xpro.com/?ublib=1c6571fb-81a4-4001-812e-c626525a0304",
      "pattern": "[url:value = 'https://db7orl54.bet120xpro.com/?ublib=1c6571fb-81a4-4001-812e-c626525a0304']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:20:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858242/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31377ad0-425f-5b84-af60-2efe30c01989",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.235.67:46061/i",
      "pattern": "[url:value = 'http://110.39.235.67:46061/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:13:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858241/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccb0aab6-5c7f-560d-93f7-1fee003ae088",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.11.14.213:45490/bin.sh",
      "pattern": "[url:value = 'http://123.11.14.213:45490/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:10:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858240/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed9c97cb-09f7-5d56-a258-2f5908679cc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.221.30:55871/i",
      "pattern": "[url:value = 'http://42.228.221.30:55871/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T03:01:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858239/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7162cf13-1bfc-50ed-b7e1-dc19176bc2c1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.195.87:58598/i",
      "pattern": "[url:value = 'http://123.12.195.87:58598/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:56:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858238/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b2756b7-d4ed-5533-a288-11c8fd7eb132",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.235.67:46061/bin.sh",
      "pattern": "[url:value = 'http://110.39.235.67:46061/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:49:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858237/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab2f2c84-9f27-53ee-927b-1424c676caad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.104.80:32822/i",
      "pattern": "[url:value = 'http://182.117.104.80:32822/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:48:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858236/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b6afaff-8f94-5db1-b66b-96cb5974a28a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.216.201:53858/i",
      "pattern": "[url:value = 'http://221.15.216.201:53858/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:47:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858235/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dcf0c72-4388-51cb-a9f7-3533ddf6c1ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.40.94.54:57173/bin.sh",
      "pattern": "[url:value = 'http://125.40.94.54:57173/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:44:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858234/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a656b79-d966-5601-8089-d9d195280e52",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://tgyltcn.basketballbet.app/06e622e1-e7f9-4843-885d-28750cc88bfc",
      "pattern": "[url:value = 'https://tgyltcn.basketballbet.app/06e622e1-e7f9-4843-885d-28750cc88bfc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:44:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858233/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--960ed033-d787-5f4a-b07c-0d239b9add1e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/mpsl",
      "pattern": "[url:value = 'http://67.217.62.62/bins/mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858232/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff15a92f-9946-558e-81b5-b0ac5e3fcf45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/spc",
      "pattern": "[url:value = 'http://67.217.62.62/bins/spc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858220/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f865ca7-f3a0-5e3e-8434-750d54fcecf6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/i686",
      "pattern": "[url:value = 'http://67.217.62.62/bins/i686']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858221/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c887d2bb-18c7-5491-b956-cd38ce6c547f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/ppc",
      "pattern": "[url:value = 'http://67.217.62.62/bins/ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858222/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--230aaba9-dc2a-5c39-a6d7-e46064924795",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/x86",
      "pattern": "[url:value = 'http://67.217.62.62/bins/x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858223/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fd35d17-a546-5763-80ca-c6e054ed3837",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/arm5",
      "pattern": "[url:value = 'http://67.217.62.62/bins/arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858224/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c2775d8-7f93-5b4c-8d6c-e0aff69ad53e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/arm6",
      "pattern": "[url:value = 'http://67.217.62.62/bins/arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858225/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c9f4410-7cfc-59d2-a364-04bf2b7e317c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/x86_64",
      "pattern": "[url:value = 'http://67.217.62.62/bins/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858226/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8f74422-e40b-5f07-bbaa-63d244e11ba5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/arm7",
      "pattern": "[url:value = 'http://67.217.62.62/bins/arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858227/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8c78d79-5a6c-5d56-82ca-503aff4b4366",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/m68k",
      "pattern": "[url:value = 'http://67.217.62.62/bins/m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858228/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12b5023f-6e8a-5793-b6ef-02f7a2442b0e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/arm",
      "pattern": "[url:value = 'http://67.217.62.62/bins/arm']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858229/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e436b88-6811-5b0d-9d32-b67ad9d869e0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/sh4",
      "pattern": "[url:value = 'http://67.217.62.62/bins/sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858230/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85c81104-e006-5999-b2de-e278044da8fd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/dbg",
      "pattern": "[url:value = 'http://67.217.62.62/bins/dbg']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:40:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858231/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fc047aa-16ec-53f6-842c-467684eb9193",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.67.240:33062/i",
      "pattern": "[url:value = 'http://42.232.67.240:33062/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:39:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858219/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--502af7b0-d4de-5282-ada6-a5c7f9216da9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/cat.sh",
      "pattern": "[url:value = 'http://67.217.62.62/cat.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858217/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3719824d-5998-5719-be0b-90566304e9ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://67.217.62.62/bins/mips",
      "pattern": "[url:value = 'http://67.217.62.62/bins/mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:39:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858218/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7b723a2-eabe-57df-a4be-634587a41bbf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.141.122.183/main_ppc",
      "pattern": "[url:value = 'http://94.141.122.183/main_ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:34:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858216/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--022ed0eb-c268-56b3-bf30-fa5f957c4360",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.141.122.183/main_mips",
      "pattern": "[url:value = 'http://94.141.122.183/main_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858212/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd32e62c-9d8d-536f-963b-813250b7c471",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.141.122.183/main_mpsl",
      "pattern": "[url:value = 'http://94.141.122.183/main_mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858213/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93863859-dc15-56fc-a05d-f5db2539bff7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.141.122.183/main_arm6",
      "pattern": "[url:value = 'http://94.141.122.183/main_arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858214/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca3f5073-af1f-57b6-880d-16d2667b89ef",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.141.122.183/main_x86",
      "pattern": "[url:value = 'http://94.141.122.183/main_x86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858215/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--444a0f2c-9459-59e4-962c-9d312eaab2ca",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.232.67.240:33062/bin.sh",
      "pattern": "[url:value = 'http://42.232.67.240:33062/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:32:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858211/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a7b5e18-6fef-592c-8e8b-976721c48ee0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.117.104.80:32822/bin.sh",
      "pattern": "[url:value = 'http://182.117.104.80:32822/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:30:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858210/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--221c87aa-44dc-5c86-8a36-be670dc67e0f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.12.195.87:58598/bin.sh",
      "pattern": "[url:value = 'http://123.12.195.87:58598/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:27:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858209/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d3c8680-789e-5f67-9125-427f35467a68",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.228.221.30:55871/bin.sh",
      "pattern": "[url:value = 'http://42.228.221.30:55871/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:19:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858208/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--771d0aba-663d-51d9-a6c6-191d7508950e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.236.31:45107/i",
      "pattern": "[url:value = 'http://182.121.236.31:45107/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:17:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858206/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85f465a5-c310-5c78-8b68-32e6eec9b079",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.236.31:45107/bin.sh",
      "pattern": "[url:value = 'http://182.121.236.31:45107/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:17:31Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858207/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81bb0b21-ceec-5b42-8b19-dcced4ff37c3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.216.201:53858/bin.sh",
      "pattern": "[url:value = 'http://221.15.216.201:53858/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:11:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858205/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c680964-42c3-5fb2-9a3f-d6b45233ec1b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zkvxphk.barandebash.bet/aa4301e5-9022-49a6-af8f-c9d4eacaa100",
      "pattern": "[url:value = 'https://zkvxphk.barandebash.bet/aa4301e5-9022-49a6-af8f-c9d4eacaa100']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T02:09:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858204/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3531fc7-82f6-58a4-9285-d5d1852a2728",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://rpvfsmg.bankiran.bet/75fa9c63-84a3-47fd-abda-01139811da0b",
      "pattern": "[url:value = 'https://rpvfsmg.bankiran.bet/75fa9c63-84a3-47fd-abda-01139811da0b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T01:33:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858203/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14a1c2e2-e445-529a-9c4b-a6770c2ac409",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://8i927m8y.bcgamefarsi.com/?ublib=02da6180-7ad0-4e65-a8ae-9441f50b02d0",
      "pattern": "[url:value = 'https://8i927m8y.bcgamefarsi.com/?ublib=02da6180-7ad0-4e65-a8ae-9441f50b02d0']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T01:18:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858202/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3b1922d-01d0-5d20-b5a2-7fce85aa80d6",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.132.189:37491/i",
      "pattern": "[url:value = 'http://61.53.132.189:37491/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T01:12:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858201/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c698ffa-ffd4-5377-be2b-37a5bacea347",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://39.71.95.86:55726/bin.sh",
      "pattern": "[url:value = 'http://39.71.95.86:55726/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T01:02:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858200/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08af3255-d438-532e-8f13-a8d798073cb2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qxzwbbx.bakht.club/8d7943f7-3ca9-4b58-bfa9-f3f4787b4df1",
      "pattern": "[url:value = 'https://qxzwbbx.bakht.club/8d7943f7-3ca9-4b58-bfa9-f3f4787b4df1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:57:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858199/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af2a1319-32c5-513c-9fb3-5e06979a22dd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.172.218.181:57661/i",
      "pattern": "[url:value = 'http://45.172.218.181:57661/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:49:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858197/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16f62099-a120-5ded-a899-388245bef720",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://94.199.218.56:9070/i",
      "pattern": "[url:value = 'http://94.199.218.56:9070/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:49:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858198/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74fdfc51-7c2f-5f53-87f8-a372e17934f8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://196.190.224.62:40365/bin.sh",
      "pattern": "[url:value = 'http://196.190.224.62:40365/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:45:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858196/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f571e7c3-2eb8-5747-b8b5-5e5554b610eb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.129.130.243:42791/i",
      "pattern": "[url:value = 'http://123.129.130.243:42791/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:42:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858195/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8421edde-cf11-528b-aac3-804cafc428d0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.1.247.31:50388/i",
      "pattern": "[url:value = 'http://221.1.247.31:50388/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:30:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858194/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--193eb98b-499b-57ad-9e47-f23e5c2d9d6f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.172.218.181:57661/bin.sh",
      "pattern": "[url:value = 'http://45.172.218.181:57661/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:24:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858193/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff4973e3-f0dc-5fe6-8556-d8616de6fefd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zkenezc.baccaratbazi.com/1cd153b6-68f9-451b-bb81-b8d7f4f263cb",
      "pattern": "[url:value = 'https://zkenezc.baccaratbazi.com/1cd153b6-68f9-451b-bb81-b8d7f4f263cb']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:22:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858192/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c51dc8e7-9af0-55be-8bf0-5e9a9430d8ce",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.133.215:55270/i",
      "pattern": "[url:value = 'http://61.53.133.215:55270/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:12:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858191/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e28c6bf-9188-5b0e-96e8-ffd7dc5d714a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.53.72.77:45483/i",
      "pattern": "[url:value = 'http://61.53.72.77:45483/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:11:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858190/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79841c1a-cdf8-5437-a2b9-99574b40a178",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gunanx.303-bet.buzz/71a19117-b8f9-4057-a033-54bfb2b5b2ac",
      "pattern": "[url:value = 'https://gunanx.303-bet.buzz/71a19117-b8f9-4057-a033-54bfb2b5b2ac']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:09:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858189/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d24c47f7-b6fb-5dbe-a6a6-3a2229ee779e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.1.247.31:50388/bin.sh",
      "pattern": "[url:value = 'http://221.1.247.31:50388/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-04T00:08:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858188/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5fa069a-5c1b-5969-8bd3-0c37f3efff18",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.56.175.128:52705/bin.sh",
      "pattern": "[url:value = 'http://42.56.175.128:52705/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:57:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858187/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b59a57e-17c5-5860-a4bd-bb325aaccb8a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.225.71.35:52848/i",
      "pattern": "[url:value = 'http://42.225.71.35:52848/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:53:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858186/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16461271-8602-53f2-8005-eae801e5daf9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.114.174:33551/bin.sh",
      "pattern": "[url:value = 'http://61.52.114.174:33551/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:50:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858185/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dff80d2-f053-5bcd-8936-c6bc75f58e47",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://221.15.146.137:55021/i",
      "pattern": "[url:value = 'http://221.15.146.137:55021/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:48:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858184/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a7c9320-d891-57db-95e8-54c5129fc8ff",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://kpcifot.aypoker90.com/6f85cb02-5ea1-49c7-b522-4ae14f718e40",
      "pattern": "[url:value = 'https://kpcifot.aypoker90.com/6f85cb02-5ea1-49c7-b522-4ae14f718e40']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:47:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858183/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a62204f-e5cc-5943-bf40-d1085d56f7ad",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.41.222.102:34615/i",
      "pattern": "[url:value = 'http://125.41.222.102:34615/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:42:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858182/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--669c4c47-3ece-5087-a7b2-1d690306add9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnloongarch64xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:38:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858181/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b3a0edd-5ccb-569a-8532-6b621dc013a4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnsh2xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnsh2xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:38:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858177/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d1acc95-417e-5e93-a2ca-b934cb204a45",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnmicroblazexnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:38:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858178/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75c60064-748c-5111-95e3-8da6ceaef0da",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnor1kxnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnor1kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:38:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858179/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1dc0fdd-5b4f-5f76-b16d-f73bc10bc9ee",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnriscv32xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnriscv32xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:38:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858180/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b1403c9-02f0-5874-bbea-7e571520a82b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxni386xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxni386xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:37:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858175/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0841e30d-bab2-517d-82c5-ebad09be87bf",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnriscv64xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnriscv64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:37:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858176/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8f44e6c-f861-5b6d-81a4-4bc23d07bf14",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.25.99:39625/bin.sh",
      "pattern": "[url:value = 'http://115.59.25.99:39625/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858169/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe3ad19c-944d-5f37-b297-69262ac9205e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnx86_64xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnx86_64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858170/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7825557-8f6a-5a68-8a86-fb2677c20d37",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnpowerpcxnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858171/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9bd2cbf-a2ea-54a9-a3e2-f529567d7f5b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnm68kxnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnm68kxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858172/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95683513-c840-5501-aa39-950cccd0319d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnmipsxnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnmipsxnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858173/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--997c6d64-9f2e-5f88-90a6-324eb008d60d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/run.sh",
      "pattern": "[url:value = 'http://176.65.139.131/run.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:20Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858174/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a843907e-86ca-5c91-91ee-64c7d2206487",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/o.xml",
      "pattern": "[url:value = 'http://176.65.139.131/o.xml']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858168/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9638e35c-166a-5d48-b707-73f39bc58842",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnaarch64xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnaarch64xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858166/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57bac73b-f9bb-59d8-9dc0-7a8c4b12825a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://176.65.139.131/bins/xnxnxnxnxnxnxnxnsh4xnxn",
      "pattern": "[url:value = 'http://176.65.139.131/bins/xnxnxnxnxnxnxnxnsh4xnxn']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:36:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858167/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ea311f7-7ad5-5951-8a93-40afe7014954",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.225.71.35:52848/bin.sh",
      "pattern": "[url:value = 'http://42.225.71.35:52848/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:33:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858165/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f645be36-d97c-5904-8527-eb86d9026231",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://61.52.114.174:33551/i",
      "pattern": "[url:value = 'http://61.52.114.174:33551/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:22:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858164/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--520b8131-f36d-57e7-a834-4372741e2afc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://7g5swyfn.bazipoop.com/?ublib=a815c546-6abb-42e5-8ac0-b3f3472f6189",
      "pattern": "[url:value = 'https://7g5swyfn.bazipoop.com/?ublib=a815c546-6abb-42e5-8ac0-b3f3472f6189']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:18:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858163/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c989a40a-2957-571d-bc4c-3b6a362a113b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://gqxhbsg.asa90.bet/9df00411-b173-452b-8576-3f19224b5fa8",
      "pattern": "[url:value = 'https://gqxhbsg.asa90.bet/9df00411-b173-452b-8576-3f19224b5fa8']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T23:11:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858162/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16d40f2c-a637-5920-8a69-ab8356ef8c91",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://xrb3ppl3.akharinbama.ir/?ublib=4a791553-542b-424d-a05f-860ea25895c1",
      "pattern": "[url:value = 'https://xrb3ppl3.akharinbama.ir/?ublib=4a791553-542b-424d-a05f-860ea25895c1']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:52:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858161/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da93e596-18e9-5b11-af43-43c20c27a917",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_a0fa137f8e787565.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_a0fa137f8e787565.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:49:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858160/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44a13e2c-26b6-528c-b1bd-dc69d36b7cd9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.148.103:43777/bin.sh",
      "pattern": "[url:value = 'http://222.138.148.103:43777/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:47:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858159/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23a99deb-d5ba-5582-8bab-2f9b20fca0d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_d03ee7ca7adf58d0.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_d03ee7ca7adf58d0.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:44:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858158/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ab7abd9-c0e3-55e3-8488-8f7b262d24a5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.50.204.246:56225/i",
      "pattern": "[url:value = 'http://115.50.204.246:56225/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:38:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858157/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97241dc3-6c54-5e64-b939-0c0e7f0f11a2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://djkbtwq.aryabet.bet/e5015c82-bc06-4252-b16d-b63cc55e2bf2",
      "pattern": "[url:value = 'https://djkbtwq.aryabet.bet/e5015c82-bc06-4252-b16d-b63cc55e2bf2']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:36:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858156/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a86b737-48a4-5887-8034-8894fbecd3b3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://62.60.226.140/files/454503574/hlgXy3t.exe",
      "pattern": "[url:value = 'http://62.60.226.140/files/454503574/hlgXy3t.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:36:03Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858155/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a341305f-cb76-55e9-b46b-f4d9b716a51e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://123.188.64.6:39760/i",
      "pattern": "[url:value = 'http://123.188.64.6:39760/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:14:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858154/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--455b04d0-f812-5369-b19c-186a87ef1f8d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.202.186.126:41884/i",
      "pattern": "[url:value = 'http://27.202.186.126:41884/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:05:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858153/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bce85464-0e43-5936-9bb6-1b68d67d4c03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://wjsuzxt.arian90bet.bet/44e3fbae-4ef2-4ab9-ad12-1577a37a8bf9",
      "pattern": "[url:value = 'https://wjsuzxt.arian90bet.bet/44e3fbae-4ef2-4ab9-ad12-1577a37a8bf9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T22:05:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858152/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f5cf6c3-dfc5-5f31-ae41-45d60df318c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.178.128:53896/i",
      "pattern": "[url:value = 'http://27.215.178.128:53896/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:35:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858151/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1054699-6f95-55a4-adfa-860a7d38cec0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.85.110.38:41787/bin.sh",
      "pattern": "[url:value = 'http://110.85.110.38:41787/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:30:24Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858150/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dfc5fa4-ffdf-503c-be20-8d5ccbc533fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://120.84.215.239:48456/i",
      "pattern": "[url:value = 'http://120.84.215.239:48456/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:25:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858149/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed6d4f79-2a7b-54fb-ac3b-e0d4e85acadd",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://pmieubk.arabs.promo/0ab89340-ef43-4c4e-9f48-0b4cb954e3d4",
      "pattern": "[url:value = 'https://pmieubk.arabs.promo/0ab89340-ef43-4c4e-9f48-0b4cb954e3d4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858148/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6d28162-6259-5dec-8b9c-6b1e3b6f5d97",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://zjtplqi.arabi.poker/68cddf08-a7c3-4565-ab6f-a811339871f6",
      "pattern": "[url:value = 'https://zjtplqi.arabi.poker/68cddf08-a7c3-4565-ab6f-a811339871f6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:20:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858147/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f2b3b76-ba55-5916-b4cc-8dc61c7424bb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://t0uo8kf9.basketballiran.com/?ublib=ef076ad3-dc75-4449-9735-04511cc13701",
      "pattern": "[url:value = 'https://t0uo8kf9.basketballiran.com/?ublib=ef076ad3-dc75-4449-9735-04511cc13701']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:17:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858146/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--643e5908-67a5-5ede-a210-e35b5f83a6a7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://27.215.178.128:53896/bin.sh",
      "pattern": "[url:value = 'http://27.215.178.128:53896/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:13:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858145/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abde6144-0eb1-5901-ae89-6a26c6cb958e",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://175.173.159.67:46603/i",
      "pattern": "[url:value = 'http://175.173.159.67:46603/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T21:08:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858144/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cc5dacc-48dd-59b9-90a2-7ffe212819f9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.218.72:44335/i",
      "pattern": "[url:value = 'http://115.49.218.72:44335/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:52:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858143/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04bff354-3440-5cae-a504-92899c904a78",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.49.218.72:44335/bin.sh",
      "pattern": "[url:value = 'http://115.49.218.72:44335/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:49:22Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858142/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1ca7a69-09dd-51a4-9473-fe5d52547823",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://ihmqfsm.arabicbet.casino/4c2862f8-a934-4a49-b515-ae5e8eccf83a",
      "pattern": "[url:value = 'https://ihmqfsm.arabicbet.casino/4c2862f8-a934-4a49-b515-ae5e8eccf83a']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:49:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858141/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5339a2a9-858b-5bd2-b31a-c0c8ce2cd915",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.74:39313/i",
      "pattern": "[url:value = 'http://46.236.65.74:39313/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:48:10Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858140/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b291b2c-9615-57bb-81f6-fc362f800508",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.125.229:40808/i",
      "pattern": "[url:value = 'http://115.56.125.229:40808/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:42:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858139/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--207de7e0-eb35-553b-a852-c41e739933b8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://effgtty.ar888starz.bet/da58a8ec-dc07-4f47-a5c4-e32aff401e7b",
      "pattern": "[url:value = 'https://effgtty.ar888starz.bet/da58a8ec-dc07-4f47-a5c4-e32aff401e7b']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:35:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858138/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2de8a09e-fefb-5a3e-a8ae-5178ee1a925f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.74:39313/bin.sh",
      "pattern": "[url:value = 'http://46.236.65.74:39313/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:30:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858137/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a3e69f3-d723-56c3-98ca-534927b79738",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.138.151.220:36233/i",
      "pattern": "[url:value = 'http://222.138.151.220:36233/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:29:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858136/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83fe8481-0ea9-5743-b6fc-ed7efa2f9e10",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cxexxbb.apk.bet/40307153-9aef-4dbc-b1a7-edd1377e528f",
      "pattern": "[url:value = 'https://cxexxbb.apk.bet/40307153-9aef-4dbc-b1a7-edd1377e528f']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:25:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858135/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77041329-3331-5a76-b8ec-5e066771f17a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.51.106.148:54137/i",
      "pattern": "[url:value = 'http://115.51.106.148:54137/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:22:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858134/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0350bfd-7c1e-550a-b265-25bf34b6d053",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://cxfvahh.404bet.casino/dc47a586-fc06-4f6d-81c3-275864896218",
      "pattern": "[url:value = 'https://cxfvahh.404bet.casino/dc47a586-fc06-4f6d-81c3-275864896218']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:22:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858133/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30cdddd7-13cb-5baa-9280-484bbd69f04d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.56.125.229:40808/bin.sh",
      "pattern": "[url:value = 'http://115.56.125.229:40808/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:17:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858132/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7af8fa38-ac3b-5476-9491-9f8bf3ff156c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.51.106.148:54137/bin.sh",
      "pattern": "[url:value = 'http://115.51.106.148:54137/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T20:11:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858131/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--beecf361-a5c9-54c5-aafb-9c9ae3229990",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://khuqcze.303.audio/07fac9ea-f851-4a3f-882a-907cf78c448e",
      "pattern": "[url:value = 'https://khuqcze.303.audio/07fac9ea-f851-4a3f-882a-907cf78c448e']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:47:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858130/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91bc636e-5abc-58a9-9bb6-4118088db8db",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.228.135.116:50099/i",
      "pattern": "[url:value = 'http://113.228.135.116:50099/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:46:25Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858129/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--347cbf59-833c-5923-ac99-5de7b2eccd66",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.121.63:35592/i",
      "pattern": "[url:value = 'http://182.126.121.63:35592/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:45:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858128/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c03effd7-d881-547f-9116-f3429ee1558d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.112.190.91:57272/i",
      "pattern": "[url:value = 'http://182.112.190.91:57272/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:36:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858127/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d7eac7b-6ae1-50da-b9cd-0f057fbeb0e4",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://83.168.110.191/re.sh",
      "pattern": "[url:value = 'http://83.168.110.191/re.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:33:16Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858126/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06b04a10-dbd2-5159-8c2f-d714d12e057c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.37.113.30:38033/i",
      "pattern": "[url:value = 'http://110.37.113.30:38033/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:29:27Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858125/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--900f8f82-746f-5070-bf32-68780a50e991",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://113.228.135.116:50099/bin.sh",
      "pattern": "[url:value = 'http://113.228.135.116:50099/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:27:26Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858124/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--710e1d72-cd29-541f-a654-9262a6c3e9c0",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.63.35.206:56555/i",
      "pattern": "[url:value = 'http://115.63.35.206:56555/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:26:07Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858123/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7876b8f7-7f49-5505-ac9b-b1f621d0b154",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.126.121.63:35592/bin.sh",
      "pattern": "[url:value = 'http://182.126.121.63:35592/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:24:42Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858122/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3500d7b-da16-5b18-97d7-dae3ee1f2c3b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://110.39.237.33:44778/i",
      "pattern": "[url:value = 'http://110.39.237.33:44778/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:22:29Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858121/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c406978d-e23a-5024-8151-fb6d93d09d02",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://8vjdfz8n.basketballiran.bet/?ublib=0eb725c0-7646-40d0-8a13-f81726a37a42",
      "pattern": "[url:value = 'https://8vjdfz8n.basketballiran.bet/?ublib=0eb725c0-7646-40d0-8a13-f81726a37a42']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:17:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858120/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c0cf73f-789f-5162-87c0-77ef23a681e2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://hekjmsa.2026.futbol/9300ff8c-e441-4a22-8e30-3dd808b51096",
      "pattern": "[url:value = 'https://hekjmsa.2026.futbol/9300ff8c-e441-4a22-8e30-3dd808b51096']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T19:11:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858119/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48613f12-0d56-5635-afd0-c1779443c5e5",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://91.92.242.236/files-129312398/files/file_3cd781bcee69e6b7.exe",
      "pattern": "[url:value = 'http://91.92.242.236/files-129312398/files/file_3cd781bcee69e6b7.exe']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T18:59:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858118/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afdd3f05-a6a1-5967-907c-64b3b6416ff7",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.180.39.77:49590/i",
      "pattern": "[url:value = 'http://42.180.39.77:49590/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T18:48:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858117/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fde15427-643e-58ee-b01a-5b919b4bb760",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://favmrwg.1xbet-official-xbet.top/ef4352b4-ba4c-4235-a72f-de9d4bb179be",
      "pattern": "[url:value = 'https://favmrwg.1xbet-official-xbet.top/ef4352b4-ba4c-4235-a72f-de9d4bb179be']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T18:35:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858116/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9bf4782-e17d-59ee-b8d9-9420973e0c28",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.52.39.77:45266/i",
      "pattern": "[url:value = 'http://42.52.39.77:45266/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T18:34:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858115/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4438569c-de16-51f5-a953-1c6459589a48",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qyteglr.1xbetios.bet/b4b3b67d-770f-43ba-95b3-6c31b299ce60",
      "pattern": "[url:value = 'https://qyteglr.1xbetios.bet/b4b3b67d-770f-43ba-95b3-6c31b299ce60']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T18:28:19Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858114/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a2891fa-0a23-5ba8-b4a6-766ea4adefc9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.43.104.117:33982/i",
      "pattern": "[url:value = 'http://125.43.104.117:33982/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T18:06:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858113/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8a6d742-8633-5dfc-9f0e-836eb9965489",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.163.121:47510/i",
      "pattern": "[url:value = 'http://222.134.163.121:47510/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:56:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858112/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--360a7115-29c0-51d7-8d89-4aae77db857c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://qjothjo.1xbetandroid.bet/d3e5d83c-596f-4450-bc7a-59428ccf0ab6",
      "pattern": "[url:value = 'https://qjothjo.1xbetandroid.bet/d3e5d83c-596f-4450-bc7a-59428ccf0ab6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:53:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858111/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5860664-f649-580c-98db-8fa74fa8d0a8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://4ly606b9.aftabsport.ir/?ublib=f381ca2a-b6b2-4093-8c72-3ae7d7a02d6d",
      "pattern": "[url:value = 'https://4ly606b9.aftabsport.ir/?ublib=f381ca2a-b6b2-4093-8c72-3ae7d7a02d6d']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:52:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858110/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bb7a356-8473-5ed3-99a2-93fefc1c5fb8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://vtqjke.1xbet1farsi.com/3e2d04bf-9595-4a7d-b9ab-37c9511842b9",
      "pattern": "[url:value = 'https://vtqjke.1xbet1farsi.com/3e2d04bf-9595-4a7d-b9ab-37c9511842b9']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:49:05Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858109/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13d740f5-7862-55f1-bfdc-f249e036e2fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.35.229:47900/i",
      "pattern": "[url:value = 'http://182.114.35.229:47900/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:48:15Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858108/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f620b61f-72c3-5086-8b06-53b0c30e061f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.18.81:36286/i",
      "pattern": "[url:value = 'http://125.44.18.81:36286/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:34:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858107/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52d9eed5-4643-5d41-892f-c6e03b606510",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://222.134.163.121:47510/bin.sh",
      "pattern": "[url:value = 'http://222.134.163.121:47510/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:32:14Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858106/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66136741-b94c-54ad-ab77-e5e6b7738d5b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://219.156.22.2:32963/i",
      "pattern": "[url:value = 'http://219.156.22.2:32963/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:30:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858105/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9058e0b2-6c92-53cc-9d60-9650408bdab3",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.90.54:49233/i",
      "pattern": "[url:value = 'http://42.235.90.54:49233/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:29:12Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858104/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49b3facb-0de2-5e74-80f7-efd293ee77fb",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://115.59.25.99:39625/i",
      "pattern": "[url:value = 'http://115.59.25.99:39625/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:28:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858103/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--598d7f66-b9d3-5b61-801b-b987aef7308d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.114.35.229:47900/bin.sh",
      "pattern": "[url:value = 'http://182.114.35.229:47900/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:22:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858102/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--177b1db7-7239-5e86-9c32-2afa3f34db5c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: https://bqm57dpz.betgit.casino/?ublib=5bbe18bf-c69d-4318-af4a-713e7fde854c",
      "pattern": "[url:value = 'https://bqm57dpz.betgit.casino/?ublib=5bbe18bf-c69d-4318-af4a-713e7fde854c']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:17:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858101/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d88ce72-f714-539b-a5b0-74241a98a8fc",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.235.90.54:49233/bin.sh",
      "pattern": "[url:value = 'http://42.235.90.54:49233/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:14:21Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858100/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbbb3674-47e3-5d98-be72-42f985a27b03",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.123.209.147:42417/bin.sh",
      "pattern": "[url:value = 'http://182.123.209.147:42417/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:11:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858099/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7278a226-6b8c-5f9b-8839-111dfecc112b",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://178.16.54.109/sodola",
      "pattern": "[url:value = 'http://178.16.54.109/sodola']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:07:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858098/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36edd7d3-4c9e-5bb4-ba9c-af95746d025d",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://46.236.65.145:47053/bin.sh",
      "pattern": "[url:value = 'http://46.236.65.145:47053/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T17:02:04Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858097/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70b4573c-59d9-5fe6-bcc8-9bf9668a51b1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.57.191:59950/i",
      "pattern": "[url:value = 'http://182.121.57.191:59950/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:56:18Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858096/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0383e44a-62e8-5847-a4e7-a45d0471cf62",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://125.44.18.81:36286/bin.sh",
      "pattern": "[url:value = 'http://125.44.18.81:36286/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:52:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858095/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66901dae-ead7-5f6f-9abc-e4684b0403d2",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakx86",
      "pattern": "[url:value = 'http://45.202.249.34/zakx86']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:44:13Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858094/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73236053-d527-5f45-88b3-55601b2b4497",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakarm5",
      "pattern": "[url:value = 'http://45.202.249.34/zakarm5']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858087/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35f6c53c-7217-5a6f-9cf1-882c9ca6de35",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zaksh4",
      "pattern": "[url:value = 'http://45.202.249.34/zaksh4']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858088/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f19c2a8-4a7e-54c1-9669-30852adbe3d8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakx64",
      "pattern": "[url:value = 'http://45.202.249.34/zakx64']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858089/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc87deda-8552-5919-b0d3-f92a1d19bc86",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakarm7",
      "pattern": "[url:value = 'http://45.202.249.34/zakarm7']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858090/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26ffa86d-40bb-5bf0-b5f9-45993cbc0e2a",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakarm6",
      "pattern": "[url:value = 'http://45.202.249.34/zakarm6']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858091/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d62e8bf-f772-5298-9572-2b876f744f2c",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakspc",
      "pattern": "[url:value = 'http://45.202.249.34/zakspc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858092/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21116122-46d9-5355-b8ff-20b2b53d6133",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/dck",
      "pattern": "[url:value = 'http://45.202.249.34/dck']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:17Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858093/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7ed5aac-7e1a-5d46-ba75-dc9c3fbf7221",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakm68k",
      "pattern": "[url:value = 'http://45.202.249.34/zakm68k']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858083/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5a2738a-1d22-572a-bf12-73696ce157c9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakmips",
      "pattern": "[url:value = 'http://45.202.249.34/zakmips']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858084/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5499330-2fa9-5507-9cbb-4c2cd376e13f",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakmpsl",
      "pattern": "[url:value = 'http://45.202.249.34/zakmpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858085/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70104006-81c5-52d1-bba1-91a6051f0084",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://45.202.249.34/zakppc",
      "pattern": "[url:value = 'http://45.202.249.34/zakppc']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:43:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858086/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b56a33c-9fad-5fa0-b669-09e80e2bc9d1",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.123.209.147:42417/i",
      "pattern": "[url:value = 'http://182.123.209.147:42417/i']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:39:08Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858082/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1aa68c73-ab86-5660-9a7c-6f2a9c660ff9",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://42.176.125.16:57639/bin.sh",
      "pattern": "[url:value = 'http://42.176.125.16:57639/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:32:06Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858081/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3f454da-9d43-50e5-bbeb-1d5abc232ec8",
      "created_by_ref": "identity--8a3f1b2c-5e9d-4a7b-b6c1-3d8e7f4a9c2b",
      "created": "2026-06-10T16:17:48.510Z",
      "modified": "2026-06-10T16:17:48.510Z",
      "name": "url: http://182.121.57.191:59950/bin.sh",
      "pattern": "[url:value = 'http://182.121.57.191:59950/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-06-03T16:28:11Z",
      "labels": [
        "malicious-activity"
      ],
      "external_references": [
        {
          "source_name": "urlhaus",
          "url": "https://urlhaus.abuse.ch/url/3858080/"
        }
      ]
    }
  ]
}