{
 "type": "bundle",
 "id": "bundle--f8a6dba0-b302-4090-94ad-c83ab47d100b",
 "objects": [
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T00:00:00.000Z",
   "name": "threat-intel-feed",
   "identity_class": "system"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f1dc182b-e479-4a67-bf52-24ed73a2c7b7",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Potassium ip",
   "pattern": "[ipv4-addr:value = '31.56.19.71']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 83,
   "labels": [
    "Potassium",
    "band:high"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: Spamhaus-DROP,ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5ebaf72c-a133-42d9-8c89-1a0b43f34d50",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0c32f0e6e9f0b6d683ac33d12cfacd8679a552c1b3be2a22c8d7301626243725']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cfddf002-d319-40bf-98fa-a1107f0513f4",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0e4233ea31ddf9b40c10b7302afa658207caf154d049af282cbf4191cd9e2796']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--27e29449-5f17-48e1-bd30-15a16c0430d8",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1b37fa166113be6dc2af69d453525ba219b644a14a55bece671c569d7f015457']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f4d9f0d8-baf0-4e24-b638-1501ef7dabc0",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '22e3e4b6e868874f221acfdfb5cb1fecd5b6371628eaeeee368d11de73825522']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4263741a-25de-4c0a-88a6-72b375cf3fc7",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '35ac6bdb74d3de6525dea276068900b1f1f6c58c5840bae7d4fb1e21aca2302c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--008c1e1a-f264-462d-a1ef-71ab905510ec",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '37c3241ef811b90b3afb9062d292cb0645b300842547a6e6bdb834e0b7cd896f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c9f8d436-b929-4d2c-8510-d92de6f62416",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '462ae0633aa6d9da3ac7ba770ea311299f42387c8e7fec8378ebe19287bb4013']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--38c5c604-ad41-4a35-a792-0c1d57f5bb5d",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '62f73dee201dfe781335b5e65ee3f082b12ded930f5bf2462505976f1bebfac8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7083d9b4-408c-4b73-a9a3-2682fdc65945",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '64b07b6962b1cf1e450e596e54c4610da4d076d7288f0c22f7b0d427cc7988ab']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bb676271-774b-4cc0-a4f3-ae420afbbe29",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '70953d184d44fecda1153b0bfd4e0285b5c09c457829e134fda926fb8ed65dfa']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9e51c88e-1766-4e4a-b77e-9330b0f20bda",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7bef9a6e154a1bbba7c2edca0df3af39b975f18c3f60af14d1af3c2485e4f688']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d39aa3b0-c278-4b1c-a6cb-d59ab26b1ef8",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7cbc06c5a80c45ade7be3d7df9af418314bc08f31dbe8fd6fceabd511f2da2d7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--afe371fe-5306-4811-af4b-ec55e448c0dd",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar domain",
   "pattern": "[domain-name:value = 'ga.adwgamestore.org']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fdabeaf3-f41d-4292-9a8b-0eff1a71584d",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://dk.agia4d.org/n/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e44fcdd2-f44e-4ba2-aaf3-e3bc07399a7a",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://dk.agia4d.org/ob/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e8b00f41-84c3-414c-b87b-eec5fdc1df46",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://dk.agia4d.org/pmz/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ef7fecc5-2788-4709-817d-fc4df01102ce",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://dk.agia4d.org/vn/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e8d675d8-8fb7-400f-b325-212e1d2c7db9",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://ga.adwgamestore.org/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--70afb0e2-8f5d-4e26-a8a0-e7091fce003a",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://m.agenpr.org/ck/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--00fa6fd7-838a-4098-b162-ebe88a7a1432",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://m.agenpr.org/i/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ecfb7f17-dd18-4da7-a8d9-6c73d5663cd7",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://m.agenpr.org/jt/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ee1ffef8-36fe-4532-ac78-dbe3a051b9ea",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://m.agenpr.org/l/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b763e718-e305-46f1-8a01-42ac2ffc6e51",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://m.agenpr.org/mh/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b0ad8857-b82b-461c-bf4a-9602d2bfaa15",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://m.agenpr.org/nz/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1be58848-a059-4994-8dfe-fd527f4e3937",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Vidar url",
   "pattern": "[url:value = 'https://m.agenpr.org/ol/']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Vidar",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8186a045-9875-440b-b4fc-bc94377955c7",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "StrelaStealer domain",
   "pattern": "[domain-name:value = 'majastee.com']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "StrelaStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3e5f6b88-f03b-461a-a482-ca97f7202bda",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "ClearFake domain",
   "pattern": "[domain-name:value = 'z0bhclq0.energedia.dev']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "ClearFake",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bdbc479c-1b12-4850-b27f-fb3813916d9f",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "ClearFake domain",
   "pattern": "[domain-name:value = 'zfvg0vcv.forbesae.com']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "ClearFake",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f1da85af-c5a0-472b-a5d5-636a0f9bf5d3",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Jackskid ip",
   "pattern": "[ipv4-addr:value = '104.218.50.244']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "Jackskid",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--919c14bf-be83-4e12-9bab-9a47e427b0d1",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Cobalt Strike ip",
   "pattern": "[ipv4-addr:value = '13.60.4.205']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "Cobalt Strike",
    "band:medium"
   ],
   "description": "Commercial post-exploitation C2; precursor to ransomware deployment | ATT&CK T1071.001, T1105, T1059 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--13edf6a1-1723-4ce6-b974-11990f318e53",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Jackskid ip",
   "pattern": "[ipv4-addr:value = '204.12.218.236']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "Jackskid",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6cc454a9-4319-4ebb-950f-67e945e8324b",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Cobalt Strike ip",
   "pattern": "[ipv4-addr:value = '39.96.78.162']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "Cobalt Strike",
    "band:medium"
   ],
   "description": "Commercial post-exploitation C2; precursor to ransomware deployment | ATT&CK T1071.001, T1105, T1059 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--df8a9204-6a27-47a6-95a1-05b686560c69",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Jackskid ip",
   "pattern": "[ipv4-addr:value = '45.59.126.125']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "Jackskid",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0af9177e-367a-4fe3-b137-7f0eaaab4010",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "VShell ip",
   "pattern": "[ipv4-addr:value = '85.137.244.138']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "VShell",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e1b091c0-11f2-4ac4-b421-570cc0ac163f",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS domain",
   "pattern": "[domain-name:value = 'garden-82.com']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c9b4be28-3133-48d1-8fb5-cc32de05b1bb",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "StrelaStealer domain",
   "pattern": "[domain-name:value = 'idrive.ba']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "StrelaStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--86379da0-9239-4100-bcaa-169e06208fe5",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "StrelaStealer domain",
   "pattern": "[domain-name:value = 'iict.gov.la']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "StrelaStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f0431f12-9cb8-4402-a791-6fd932c58cd0",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "StrelaStealer domain",
   "pattern": "[domain-name:value = 'ilovevirginiabeer.com']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "StrelaStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a4a686d7-cb2f-415e-9793-1c33d7f69441",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "StrelaStealer domain",
   "pattern": "[domain-name:value = 'imhoteplukata.com']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "StrelaStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d6454833-3294-4b3d-afc7-ee05c5cbe7bc",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "ClearFake domain",
   "pattern": "[domain-name:value = 'k2rf8oi3.energedia.com']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "ClearFake",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c7673306-20ac-4d68-99ca-9d9e56e8315f",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "ClearFake domain",
   "pattern": "[domain-name:value = 'nt5kwuux.paars.poker']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "ClearFake",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7d8747f5-6f83-4b20-b92f-c016d328ad2c",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "VShell ip",
   "pattern": "[ipv4-addr:value = '103.186.85.180']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "VShell",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3a5c2fd8-49b7-4363-ad81-b5beb969b712",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "VShell ip",
   "pattern": "[ipv4-addr:value = '103.186.85.181']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "VShell",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4bb9aea1-338a-41b7-99ee-82f78c07a749",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "VShell ip",
   "pattern": "[ipv4-addr:value = '124.222.147.241']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "VShell",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--156d451a-bae6-4b65-87df-c6037887c52a",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Jackskid ip",
   "pattern": "[ipv4-addr:value = '146.190.252.67']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "Jackskid",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--05f1fa8f-ed0f-4244-900b-68b84b2a6f42",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Jackskid ip",
   "pattern": "[ipv4-addr:value = '161.35.62.230']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "Jackskid",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b352140b-1155-4fd9-9c11-18352417b284",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "ClearFake domain",
   "pattern": "[domain-name:value = '3cb50pyi.warmwaffles.com']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "ClearFake",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--01842ca0-2ab5-4c2f-b49d-73680ef5fc23",
   "created": "2026-10-22T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Arista VCO exploitation CVE-2026-114625 ip",
   "pattern": "[ipv4-addr:value = '74.82.197.86']",
   "pattern_type": "stix",
   "valid_from": "2026-10-22T00:00:00.000Z",
   "confidence": 90,
   "labels": [
    "Arista VCO exploitation CVE-2026-114625",
    "band:critical"
   ],
   "description": "Listed by Arista Security Advisory 0199 (2026-10-22) as observed conducting attacks on VeloCloud Orchestrator; CVE in CISA KEV 2026-10-23 | ATT&CK T1190 | sources: https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cd4c6aeb-504d-4d61-8d7e-f19b4b4b7e04",
   "created": "2026-10-22T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Arista VCO exploitation CVE-2026-114625 ip",
   "pattern": "[ipv4-addr:value = '38.54.50.151']",
   "pattern_type": "stix",
   "valid_from": "2026-10-22T00:00:00.000Z",
   "confidence": 90,
   "labels": [
    "Arista VCO exploitation CVE-2026-114625",
    "band:critical"
   ],
   "description": "Listed by Arista Security Advisory 0199 (2026-10-22) as observed conducting attacks on VeloCloud Orchestrator; CVE in CISA KEV 2026-10-23 | ATT&CK T1190 | sources: https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1dbe3e22-48c8-4e2c-887f-1ced10a76e51",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '834b8103d77ead18306cd01518429da5e6213b49799c7ee5fb07d25a6a0d127b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1d76af81-83bf-48e0-b030-25042d51383c",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '88bb175f65535bc6e5dd9d7fa334c25184a2819f776fa733db71429504cadf5e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cee0bde8-ad33-4b85-9491-d1a551af0423",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9439234b48d64eb81fe83549dfd5fac561abe5c04fe83507e5c4a8c9045815a2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8e425b6f-64b3-47aa-af66-b67c269f3188",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '96a9b993c22610f3c8a5aec3f94996458dba8616d4339514180a75765dd134f5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--eb0c9357-09ce-4d67-9423-3a37f38f5b31",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '96c02b41f12652d1e3fe0202572edf3bdd0cc51a0efd2fe112eac420459fcd05']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--80c67ba2-0b40-4ca8-9a78-e64f8569b9af",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a443e7b252f7157f369b1faebc37b408687b3a1b2d16df7b4df674051b70449a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--16dd85bb-c987-4eda-bee0-ab979d71ce0d",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a9a8e99eb1238a1c7c08d3bd2ba97c7a111cd19c677799fdfc01f1be28b8fab1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5a8612c3-8fe5-4aeb-bba8-fbf2dbad927a",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'aca9f1eed727599ad2e32f842d2400ead093ec14d9d7c02ca2acc36916e9e256']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1d702877-b3af-42b9-bea3-01541b9a0324",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown Loader sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b6ab00c63c4dd5bba9a86dca549059e3cbe3099cbfbb377cc6709532b8cbac1b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "Unknown Loader",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e05386ac-ca74-44c3-9012-f8faf6b6db6c",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c39656eaa6b330b21067b2b1fbe45c3c57191f2537e070b0f41ff71da204f14d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--34a0088f-8903-4781-a59a-34167c32ee66",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c43452ec0bf8016cd3b01485da7bbdb2c32dfd54123c6600caafab1644949522']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--889c0db1-671c-41c8-a86b-ed023560512f",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c4c29d9e4a5f14a4730e9f1987058d034f584aaadc46636a4c02d3c67f7143dd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1fcfacb0-ab94-409f-a66c-b625703b2577",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c8b5cd6bc6e2fc5bb8754e7ce47300d81b0387e2d24f653a1da20ef8d3ca4c00']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ef494c49-a4ea-40f2-b69e-bdc5f6a0e82e",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c91a8db13c56f1e544314315bd155ef52cdf0de8d821e53c8cd13a4ad8baab4c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--72107c01-0436-48cd-a607-d39be7a4ece3",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'cbd02e179fcc6184c8d78af434b63bdefdea2144fdc01f773cb0fcda8f50d53e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4c9ba4a7-cc5d-4943-b9be-6bd7fe362abf",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd2cdeb1ba353fc9790e4b81ff0752786bbd26541fb9ad5ba7028fedec350b30e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ba6903ba-85dd-45ae-9e3e-c782953f860f",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'de4a36b45add0a0562eded85f3372e12330607856a21f97043b2852e274132bb']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2421c766-f507-493d-aad5-03d07b2c4179",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f99df81a7e4db9d649331c054fb5be9a82ac9dcb92b63bc49b7eff3e0b8ca7f6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--335bf1d8-8f13-4064-ace7-590bb4fdc36d",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fc63894e971fb6a7bc22187eda67ded8a6a8a2615fa89f4a6856cf591475d8ac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e6ea2e12-2539-40b2-9d43-79052a62385a",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '094072349a313cb7618adb520812ad506fad6f7165d64629aad7cddd61e94e79']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d42747ae-d6fa-4c6c-951d-6412c44e216d",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '09f1ab353152727f5c62fe9e4102ea90888edc9b0b6a949691c4ebb2870a66d2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2e626a04-52a6-4c8a-a05f-eba7204f60a9",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0d98501ac73fd2c318e0e1a4a223b9e2589f235627e512eac8b88a275315b69a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--96dd6e54-ceb0-4534-ad42-cabb57a8cdf9",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0dce904c73f9839313628101eabc6055a8885bc40b7adfd7097ba283ee991df5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a075b5e2-a1c6-4d9b-90ba-0af606b5dff4",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '131299a9c31c6b3e8d5c4dc614fc3cf2b31b9f91d78d28f37ece9a206f3469be']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--efea559c-815f-4586-a201-d9287434b223",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '132777f3cd54eb2fdea38bd9971c78e5e4215f33fd30496df69301a87e7167d7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4affee58-7577-42ca-bfa6-e27f86a17870",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '13de8f6601748c959829a719068482bd80f1d934e1afb1f5dfa32f315ee40592']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0656cb2a-6167-4fd4-a13c-cd381ce20ede",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '18438ce3e58bdbe47c9d7058ce05f456d5792d99926be82eb894fba985c567c8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--326709f5-af84-4f9d-af95-583586c5674e",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '2c4229230fdcb224538828468a8642aaf4429a1591fe83776f8b3aa683d65050']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--35805d5f-e5e6-4083-9b74-7c190dd00812",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '2de0e353270c3beddc1f38b860c09f86757d9c7006208bbf09a7cc22055442eb']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--23e967d7-60c9-4673-a712-45b09dab8493",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '330ed0bf38d987d25a0b08b49232c75c2cc410aa5acf3e9ab626299afc663198']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--357bfeee-0465-4636-9c25-2a18cce2ef97",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '357b7dee8a51d5b6dc3031844f715615ca7aa70a16029ff879599237b9963412']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1313f1e9-db59-4f09-a571-68206c724743",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '41059879a6706f1dacbac7cb1058036809fd166ad317b004c91983358a30a8f5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4bea0aa5-d75e-4836-bd04-7e5366d7b0a0",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '51754c16d7f70607d607d7c1bc6e1ed40ac29538b585784f69ea00b9dabe805f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b3efd977-0108-4c4f-869b-339016661511",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '533fdbf6b54775472b63e8e67a29d1647c207273b3cb32971f8647c42c6066a7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f487f3ac-8bf7-4696-b392-96583c2381a3",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '53ecffb6be8f8408ae497f78327d871d9a4cc7cb1c94486ac831e3f10a86f55a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--263853b4-8e6d-4d99-b917-6fc4e3ad4f19",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '547c34416710c1e452c0b98c2aca9ffc47b3d444bbb8d2d06ddcba671eff8e40']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a5c739ab-300f-4e01-88c2-c24acef77a2c",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '592dfb55a48b2d07789a8966dc64acb3dd10ba836e24f223d9aa354be385160f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a7d4c0c4-be47-4f90-821d-3da266c240e0",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '61d1c1ca3ed32698a440f3815606b23283a41a2c282567bfca2ee904b0932c6b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cfd9b97a-eb84-42c6-9ab6-775e033fae51",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '70b2276aaa5ff9a8e714d625b9238c5bad790145be09827fb928143810df3bc9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2772d510-e90e-4c35-81d5-47f7dc85cc3e",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7aa96e6f115552e6cc2ecff9f0d481a50978c41aabcac921e2225e0a24b465c1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--edeb0a7f-4c53-4220-8f2f-e710b0ac93fb",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '809090a7b325ec8141714d78167260baba7f8100234f7a4bf83df44853902120']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6daf7d23-3efd-48e3-ad91-8220ad186e55",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '89ad936935bebd624387c6e79ab5baa37d5dc704fb30267b5cad593daae503e7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d8cbdc7b-f2e3-420f-b571-5d3dd42f42f7",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '93c3de8bfbaff071374ed32f128a405df30eebae99c218bf9f390c0e592d75b1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--036c1e43-e91d-4df6-8a9b-127d7167a1c7",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '941152f445e894e608c631a4c621889761b6589f2bd0c41fde983a27d8f06410']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--79771e56-c745-4613-b469-453094472ae2",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9508f0de13635d2da11627c796c88e0d573e028b86640bee5c96d74de1cac385']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a20dac97-7f2a-42af-9274-11761b01dc3d",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9c4778a1d51aceecb53e437af6bbbf9c6bcd006a4f04379ffca8c162f33145b7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--94547efb-861e-40b9-baef-51c564d1f961",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a9c7b69cece1e5999a2302d4152bc038ffe8305e84e3d974ace49132241c3206']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--862a55a6-e648-4b4b-be9a-2cac5abe23e6",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b6481b7215c6147d72fc83e21fd99de8cd7d166b8245e3b86949ab56cb5ee996']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3e392921-f635-424c-aee9-47ad4d8480c5",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bdd43965b662d167774165e895328dbf0183ccd516a1bc1a86d77c4e434333ae']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9385c04b-c3c5-4471-a4c9-bf806daa668f",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'cc30e4d19f6c7975ba027b58b79bb58794c0baa7007350e4db5e15408b566f0c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--92b0a4e4-bed9-4e17-9c64-d47f1dc03407",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ccbef089901e6b3b0edf2e43c348e6d5364d21f04d5afc060edc7b98379ce991']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--81d117db-bb3c-467f-be49-4c7fc25b0124",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e59471dbb08a04c5ec6df736f149919cc5333ef19da2b2de298d4f429d0c3612']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--49a5f94e-3b89-4818-a3ef-80fca5026278",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e7be02e6806e50293502484c4e53079aaa1570c483a56be7a74406d3a9102951']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--875a2cec-8d64-48c3-a358-afdfcf858745",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'eaddd0e6bf1c396859cee853792e6878977c8951829e1c43a66b204cc11a6a47']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--000bb687-c396-49f1-92c0-c257b0f8d749",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fc6b1d2911bf919d0d6c584e3280599fa0d8eb4c30b82c6effcbc1d2850ea5d5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5ab0d01c-eaed-467d-8f3c-a04adb34c669",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0d71f57e0da7bb32157be51b9e96e242b2ae82030d133e9ac75b4dce6ce1c96d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4a282085-138e-44d5-b5e2-235105e97ce0",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '181ec92cc09b00bf5d00f9a7f0da8dc1844358232664ad5456f210d591bd8f55']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f5a4c2ae-6dae-46d1-8cdc-af96b783a4f4",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1f098cf367885640acf96e8ecbfa805029802f1549634f01e795bc87aed11ced']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7d08e5ff-b0a4-4bb0-af43-03e6975e3642",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '30b8d7d6c3f3f9ff3c30cda762b7abfbeabfea45ae3f63686a2738accf1c69cc']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--27587813-e02b-4527-9fb6-6a21a14f3de2",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '57edbacc6785bde555d8455f39bae5d1426467a4617c63b3f04d88c1fd4f44b4']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d812c12a-7412-4708-aab7-d8753bb5ccf0",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5b89ab64a71c9e9f8a89abc0ac14d04671d27083c9192cbb96960292e9157f28']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--383c88df-9c0a-4763-a30d-0c65541bd212",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5bc631967a0e38092471618bec2655b473da3b9448281dc7f944880fe50bde99']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e6ab02b4-90f8-4002-8601-0a4e53c16aeb",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '61645f048795c29bb3b8e342487a75087e73945f43faf7d260d29750976860b2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e04e3699-37f4-4453-b568-3496122b7239",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '62e7e94733ab0e1a581419037c148e75a5458eb236414a469869d8c365d78a61']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cc1bcd57-e7bb-4829-b740-2879634c925a",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '6e5819301e93c5011f823a7467c9abeacd4ed481181de64877edb05d7f2075c3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8b3b9fe1-219f-4288-93c5-e04336c20dd9",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "XOR DDoS sha256",
   "pattern": "[file:hashes.'SHA-256' = '6f45c6d9c70d97f695cb7bbef362812a17f8ed4d37dafc342c26c86ed9b43638']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "XOR DDoS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--57afccb7-2a27-4516-8bbd-767708c4bb83",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7081fbbbab2ddbe83329fc1525894e07b8b97c2cd554a60c3bc17ff61712efb6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--13a250bd-162a-47d0-80e4-35b19a2976b4",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '91b970b36849d391ea346ca9b41886f440ded1b10edbd1256dfb822c73e96852']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a4e9431c-1217-4519-a4da-7ff5112eb40e",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a184be7ca91dc0ad712b8b9509babeb7e8a79d984d009ff3b018212fd97ddc47']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--adc36d7b-3f37-4caf-95b9-0a2beb981b46",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'acc4cd59c090aeefb19581c8141a8dafdf374e9c7cb721137fec23781f11333d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f5ff7e5b-cf53-4afa-ba8e-77475055b10f",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b6d6276ea9547df63984829b991e4d412d256c123d92f9eb9981f50679d69b5c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--815c6f7f-c341-4ee7-bc61-c7550bcd8c74",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bdf266cabca5eae6bcaa98efb155a5c7eab04f1bb8227b63d589f4895507d47f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8a2f445d-b05c-44dc-8dba-97fa8727cbb4",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'cb1d103cbdf37ec599f8f58b3a1bbc7268bb42e79c6b76eabdb69b0aa12c9cb1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f7e23b84-ab13-456c-97ca-ad3d5546e3fb",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd8250fc6d2cf5f9ccc259fe62fff2266c9ead401e60e3eb8dfd5fc6240389b2e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--36c48c69-bbee-4bcf-b551-028f006b1b20",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'db300c47835860f1fece9e56c17e95e5dedd9fed53857ac738adb2081e36be08']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b6dc08e8-7604-4206-9d71-b1f984fbadf6",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'db4a69989fd4f49fc42dbd7dfcc79537f25e4d63805d09ba73686b7cfb901af5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--90735fb6-38c0-463d-83b2-112d18e8ceec",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dce923fee86495f12e1aecaa17009915e7a408b7b5ebfb38bad3a39994e5aa8a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d7f21ac3-3a34-4b50-a9cd-ebfbc10e20fb",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f07db9850af3d6f01010d9ec954be41694b9b2102bd77a5b01111f7e74146c18']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--57870814-de84-4495-837f-f0df3adac2ae",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f07f6f5f19c960fb6d7e0617624cc2d309ac80875bd26987d2c309c434e181f7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c1f21e90-9c82-4333-bceb-bc1adcb36f80",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f14c77daae60d14e9ec2830245cc70f99ba1ef5bc559e330ca1c2064900684a0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4fe4396a-fae0-4cae-8cd1-79607f67b316",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fbcd498a82a05ca491003e7975f349b8fab1d89786f280dd55b78f833632eb83']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 74,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2452008d-3e29-4365-b2e1-62ea25da2fc8",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "XWorm sha256",
   "pattern": "[file:hashes.'SHA-256' = '0641ec66f2738f661e74fdd5a11949b9e80e45764d8292d5927b4f2fc1843a00']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "XWorm",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bfb18483-c39f-4676-9b12-5f0f1fb6ff33",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '0d7b1f4e62a20a241f588ae137b3827e202d9fe10283230823d985544daab88c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a259a167-f0b1-4f4c-9cca-59d6973418ee",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '190ed66b12d54b358dc45f82d48e880be82bb2e7fcb5d9ef9b478b5ae1ddaca2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--662671af-445e-4cbc-8f22-bd91dfcc5b14",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '1c9c070c278bb724ef711f34ccf494128d230c3f9ed8772164e6d7b8de2066f4']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2d433796-5e72-415b-bcda-938712be8bbd",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '1e4e1ee9dbf92860cdec84b0170228a0cea1f276e98133b243b077319a8eb8cf']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e9417f62-82e8-4590-a0bc-efd6e5ecaa35",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '29c6d88082c0e10395e60189768bb9b2cfac68d0e37aeba7a2e042e4e64aec4b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--db7bb516-8476-4e2a-beb2-c0c30dac65a7",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '5b2e4c5b7fae354be03b326c607e41c3b7fe9a1d729fcfab5c7b4b64026ee795']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--728c2804-14ee-43d5-a90d-514b7e4a1d6e",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '666e8727826b4df74ff25caf368a41581d956f5942fab50d8c64b055f2f6a8e5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a228c12c-f761-4f11-a5c8-332c8350ee37",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '6d9fe873ebfc1428ad99eeab96d2cd9d6ede832bb9dc7f1fc0eaa2bcf84a2e07']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0bcfd3d7-ddb6-48db-9f23-34bf5d73c3a4",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "DCRat sha256",
   "pattern": "[file:hashes.'SHA-256' = '7428bbccd4dcc416487e477b2a7055757502529bc5ee6fa855ea6d99be0490ac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "DCRat",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8679489f-f80b-418e-9ac8-b335cf0819ea",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '79da353594d81d29c74225f64df9807d37e0576ffe86b690901ad4ce4095b714']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--aeb90f4c-582d-4e29-be4d-163763f0ce1d",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '9202745a156efd0b7c5a5053d72e4ac5765e6e18bd0d4318dffdc320a0a0fae2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8598d1ee-6ecb-454c-8729-0f6d4b93c964",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b92f00eeb9d90ccbc2862c8f92f71958afcfd2b5deb17ee1192e175c1c2508c6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--de855338-7655-42ab-abfa-d72fcc86e06c",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c18781474938f8a30e11078654eb744f40d7c49dbd500a13739fcb5e97befb4b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--33b20495-338a-4543-a9c2-d1a53f07cb92",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ce8d44990d8752f456bdca07bd95150c72087fe2b1813e04292d2a31b2a7e996']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ec9d7a1b-4d9c-4c09-8c70-641eefadf930",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd167eeaf74ea51be6a478eba0e42c3485b8b6600f6a0bd4ff77106930dbd0bc5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--911a1894-cff5-44b2-89fb-5d1bde3775ca",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e5d63eaaacec14120593cbfefe46ad6e3f5db07bee43a5e60796ae145991cd46']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3e1ef5b8-f1b8-4a49-a452-7fcbb0df11f5",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e94edc0f0ae04c514d3fd35eea66262440f6a626ebd2a49fa28a10f2e43f6759']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--478e9ded-18c4-4ef8-be4c-c961efcdd247",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'eb48967f0df9cf5c4865901a51ecb135e0743e7e92907fffcb20075293739523']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--04a5f99d-4add-4760-99de-13f89f9bee2d",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'faca0783fd2d9ffd496855e577eda91a5c9d1635e7849bcc833ca47aa17274e6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d32b215d-7ba8-4db2-8fae-faf6675db9be",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fca027a07a53aadeda8236ad2cab85d4374a4c09537ca1473e62fc12061e0c19']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--89b24372-dae3-4a38-a87f-10d3b42fae6c",
   "created": "2026-10-26T23:24:55.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fdae1297014671ba62d8ffe8c3ee13dc6a8234eb1c3a7d0f9ee0a7f19d190a06']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T23:24:55.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--69c35153-6b48-4491-8c3f-189c548981a8",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '0df9702efed752e824e600287187540fd1cbc50e52eb3b1c4cc06126446a27d1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1dc585b8-b1a6-4cf9-994c-1188b3ebfbd1",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Remcos sha256",
   "pattern": "[file:hashes.'SHA-256' = '49bcc0a6fa25f1d01ff245484042523430a1341b16417f343520f06a43a7f238']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Remcos",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--24c97d5d-6923-46e6-9fd2-71f73f37b7e8",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '5fbe2d464ee5f0391f98907cf43a4e37fd37aaace7e3a24e898c7945bdfcb0e7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9d775fc0-3bbd-43a3-93b7-53d5017b2d20",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '6446789645919a0aa36e6711dd5cf187e9b1db367ce883efcae0ad812f73053a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9f54dd50-02cb-4eb7-ade3-57828b9b20bb",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '87717b022f21e66c4467beda7d640736b386e23ecf5ef900d4587b6467bfd145']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--90f62fdb-4c8c-41ec-990e-bb61088c8dc7",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '87dfbd100d6e06d26c9843d74344ea31ebf8785a2a161f2af4c9bf0c2d648e56']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8a2f2ab8-8835-4a00-bcf1-e70637dbf8dd",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '97f99f1c138606ae7f1ebb2a73ad1ae6111927c894a4295f40fa1d22ac47770b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a75371d5-c432-41c4-9bbf-d91f3c2a8010",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '99476d2fd1013e6902eb0c79e9ae873e8715887b958b3221daccee8919d468e9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--43944682-3dfe-4e34-8705-d99019ca3d25",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b9b13232-53a7-46b9-bf8d-a36eda24feef",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b5fcabc415d29d82f33c62bf760ea0ae63ff062e9c2b18f82435750831493623']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--322c072c-930d-40bb-834b-2933bb07ae37",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bc0f6af5d830155321cfd1b228eb092fb9162d495ab1fd2e6e7ffc09ef973ae9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fc0b3c4c-759d-44c5-a28a-6d6d2ae69af0",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Lumma Stealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd3d8c0efa4c20e55e07a3266db9f8b433e65443496bd078bf333bf0d0c2a9d20']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Lumma Stealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--78f1298a-5581-4a2a-b686-f4c199ea119c",
   "created": "2026-10-26T21:22:53.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'de705c8a97be69dc824f406561d77bb28f15b23f3e650edc64db8eba6f99cc82']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T21:22:53.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b30b90bd-f6e0-4ff8-8cee-261acdad7fec",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '15b854997d58ba90b3243525171dc45136dfc06cc88d37f16cd21acc441700bd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ed275899-45ae-4c50-bffd-ee1cac947f28",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1ad3481cd203237e06f089e10887b3b49e52b550ff73af58c9cbce34de887136']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--42ef4094-0ab4-4e07-b37e-662c17df32ee",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '28fa49e6176856c0b9e753b351d99b1e6421f8fe7d6d9eaed13064481e51ecac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--08429291-7c66-4ca3-95bb-4a7f4328a91d",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '29675762fc30b9226091259c8aece4fe87c92d45b586547b9010fc34abcf9510']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3adc2964-f648-45f4-8409-6438f9d5ee37",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '329c8b6856e6fa18f51f5af2d512b5d3264e01c1664abac21a4d3f21fff5f36b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--22ebd6d2-99dc-4457-8f43-40bfbbf2d24b",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '32edf70e9f0998c25ad5328dcab6f171b072e3f411c848735278db1f358fbbec']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f01f12e7-08ba-412f-ab55-690a56d3e810",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '4da3af4b73a357e13d2927ba2d3660213130330685d9c729c3490357466c5251']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f8de04ff-7664-4b38-88da-b232328677b3",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '617e42d2497608afcf89dff337724eef62ce045ff792b325ffc9f9475eb00eec']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f61fd09d-3519-4805-9706-2e5326b8ac87",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7bf616b51a46a38a4982163bf24d504b726fcca85c01b15564a93a785d6fc700']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--aeb89882-d38b-4f00-8520-9c8425036373",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7cf705ee69cfcce908351c67b3d12afca1a572895849f94cb6b0a5adc776ebe0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2887250c-e757-4ea1-bcc4-87383c118946",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9eb052edaf2d307bb328388eaed113b428ce630029973135c7e373052280ad0f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a94b0bcd-03ce-4bfc-9a24-8102883edc90",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a353259c6d0e27e373c3d87327844b0603fcdaa1401cf2d54fb13607f6f0251f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fdef4ebb-f7a4-47a4-8632-3802bab57598",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b286cc046d47c8ffcd1b3f65ba72976109c62d9712713c5c113b7058d78095b2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e9eab48b-72f2-4c00-b19b-1ca6bea61521",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c868633faa9c3660d25a33f8bd6e82b58a85b3a6bd32d42818f7954ba1c3563b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1bf857e0-0db9-428c-a4dd-a1ab63ef77cc",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd09f2364141538cf25cbf5c325e06b65d7364421d9645cd1ad13cc2831088f11']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--019d10d3-3d79-4966-928a-88dc84319033",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dabf7acb9a07eaad5b219eca0517fd7af44389a1cff035829c80d49879fca68d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0150ab28-d93f-4071-8a44-2e0f0ca7990e",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'de773f73bac24590b3a0562f46fc8d20f9b6b19552ff001ae1270ac326167b86']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--690b510e-e1f2-48c2-9c3d-7bef30a50080",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e066d79efdc2c9976e0ebe0a059e427bd11111eec3a808d14ca091c882bb15c6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b4d7b8b2-dc48-4b07-8271-be52c3c8abc5",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e2a4cd045bb08009800f6714ed05c31ff903069352a8a14755fe538ebd10e425']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3e35bd34-c82b-41da-af13-fe0138f061db",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f48664d3f2b359c75bf2241aaeaca7d4ffd885997a37a31fdce7b1f8e1fdd24c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5c11754e-4b4a-44a2-ab23-b4588c026755",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f6bd3c78f0e3dca137bd07a17802e9493cc1b031e169458ffa5be2f84f5778ed']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9667c1cd-1478-4e58-ad85-5149e2485867",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f8f468faf39ff9f7d54c09d8bf9ff163038d86e0e3c015bdc53df30ac01fab33']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--478e145b-6aa8-4afe-9b34-a7f1bf97f511",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fb0165fd3ff83a047565f5f304316826ccb8bfd403c6fedad75b1c28d6efa0de']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f36395d8-d3d5-45eb-97d5-f9de1878b3cc",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fb9ec9d47f76639ad6b417e5d021ce95e7af58346ba9e3010f27e33e9183cf7d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9eaef929-6453-4fe0-bcd2-cf83c7ae38a8",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '07445494a699ee31363563df1f6254f5458b3a8343cc4d3af84c466bd6e55d10']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7284d7f9-c89c-4076-8fd7-2008a2168763",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '10e3bf8023104b11cbea9955d76570092e8c9fe14e86ed17b32786f3dc9da716']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5634cf95-e779-49b0-ab87-5170206a4aef",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '16c4c2947ed6644acaf5a09814fd314c480b32dae0182f18830b93a88ec49b45']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--81106f4e-39ec-4c50-a018-5ff43b7a9205",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '20b5c7608afa69688499cf3a6e44afa43a8d2938705db49beb2d4c995a3587e8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6337089c-ff51-4590-ac82-20b844ef7ceb",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '23ac9467216e33bf50c7f58e99613f0b36e6fe1d50853071fba3dc2c2535f5b2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a999684f-c408-4eec-b074-1b826b5cdf69",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '24eb1426b0bedf3235a02301675b56dbe42b70e18788e4a02c4d6bf50305e8f2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f2204803-3132-4f6c-a5c3-5e3a0edef66c",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '362f9a4a4e8d309d4cf0b647ef011d8d9c087742037030e9e9da472956e9de40']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4b597ea6-4f1c-426b-ad46-b2cb06b4af79",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '37e916a94348781f75e03035716479f2a0ab59b7d9eda03b5dcd4621ff1768bc']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d1cc4def-77ce-41e8-a577-0b587901e9fe",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '3875e700f4fb720e6548aebe75be6df32352efe1ec0a6e8d5d036c40d3855167']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2f659a15-0f7e-4518-92cc-241ee6a994e3",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '3afb2ce6f50ccf2e3631061f542abe3a722f4c2a0a4b7ae6d1d8ca5b779589ae']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d41c4c00-5c7c-457e-903d-641c2ad7e47d",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '4b107d24922a8c683f59847ff501875ead51cbe376fa8a128e5fb629084504b5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--64cbf376-ec12-4d58-91e8-3b28130f923f",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '524fe38abc8ab665daf0a10cf988ee83bdb30f7b86197a5bb86aa34b46a6bde3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--38c654c3-cf31-426d-a649-136b5fab7845",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '52ab2b45dd2d4186b061c4d98f6b03d8ce29104bf569cc501a2e95f92c514c30']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--92ee66ad-d6da-45bb-8e75-336a39a748ea",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '5a5bc9be71220c0ed97ec594a797830807f960f4a53afbe7b624add7ae78947b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--61f4f9ed-709a-40f6-8b4f-b82fad3c778d",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5c534ee65ea69cbf26620827250c49b22cf1f63b350c194081e70bd8e24f2fb1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5c8b5bd4-9fce-4692-a33e-82d7de09a6da",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5e4235062ce6bc98dab85cdeb2391a2c0874260ad8c8fbee7e7bf21bfcb07c1a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bba0915b-a2cf-4253-816c-79a8ae931ccd",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '6076e4498d2871564a36f0d89d5e563838ac599ffd1e99a79106fdaf8659abf7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5746ffc4-0326-42be-bbca-2d96bc4c6173",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '6dbfd3046564c7bdefd0fe13191ae125c60d16f004a5b13dd09bb652fdea631a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--27dd912c-40fe-49b9-95c0-0c8b6a4bbf03",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7cbe8cbad067284f941244eef738cd505831efa6d88505c5dd334296c31266df']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--25871a96-4a9a-4504-8748-2753079ce95a",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7e10d48ea6f15c2e87b7f25de736fdaf6c934dd470c82e221c5c0b8d01f45e40']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0eb207cf-a399-4ba7-8d37-5f8e1452ef72",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '7fa5131bc2a628f06499dfc8728f29f590abbbb2ebda3175b726fcccd6fab4c6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cece106d-1315-4230-a02f-69e7684bd7f5",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a29706981632741bfb2aee0177576897ccf0a0e6061a7d573930a3e6f733bb9e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2829dac4-edcd-40fa-ae21-ef738d49ce9d",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b143a651b27791f58aa3fed1b83f9ad1e918bbe0f65336ba883da13dd87d9ca2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c4824bdd-e652-4a38-8197-778a6b986be3",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ba307082825c7b5d06f4378a8b5d32eb8df098a240f3a0f700cf2c949afd1dd9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b91f7bc9-5aaa-4478-8ecf-67869ffb33c8",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd7dbb4da0df3c6919a05ec0b591595476e91f2e63a5bd72fde7699f18b296129']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e1ecd0f6-c6bf-4dc1-b0e4-8e23e0a9d799",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e0600aab9ed876b64029e08605357c8508a96c08695327d6b5816da8f4cd559a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--35b3c07f-0be1-4810-8e9a-72a9f6d37f3e",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e3a36c00ee6af14239e54418dcbdd265f874660c8cd878b233128e4d0df48987']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ea60b100-138a-49d4-a87f-4604c71ad961",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f67b70eda8428152b6b5ca93092fe7f5d62c73ce49f36a3aac8c9ce33ff30e7b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ad829dbe-a34e-4f69-ab87-23ea716bc38e",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fc36342dde6078108387be4993d022877f1e285b48f8e2716323d163716a3f87']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0e0c9d33-455f-4d8e-9296-cca7f55212c4",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '00522dcddb240e0a77614b5490245710ff53734e9f918c3f134a2ed47387db45']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f5430158-4e79-4c23-96f7-c84ea47757ce",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '23148a6861ae7d575a031d5c39e22b635d2cb82f84505f8833be005cd18a0894']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--61f554e3-4092-4c4b-8304-7dc7b35d2ea7",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '2812cedf3f4a6754316b83cb8b9ece98070784a0848f56582f2c928ee13e8fb1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--abcf7a3f-0591-4241-a0d0-491c8d6a18c4",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '31d6f56dbdf84ce4803b8a5d9c5fb904a2f677f3f7fb0b2a66f322706c31f88f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--73c86332-3efe-410c-a5ce-2766bfc079a6",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '3447a73a770e2cb9a47db2b8488e81f4677152c576e655265aea113730c926f2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4c433abf-7ad3-48ae-a081-e2f8090959d1",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '441206a3f1648a44d56735cc2ee8054da50cf279a8924bc985ccbd9fe3a57c92']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--80b71056-b399-4612-ac69-1ae899a14272",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '493ef64b29017cc6ed3468991f75d3214c4acc63984171154a88882a4972003f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0a71a465-56c5-4179-88be-6dfa6bc000c4",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '4c2cfc403ddb295f4ac6177ad4a0be834bdcde5123c1d0a8d3dbdc553c56bedd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0bad0bec-564b-4bf3-b98f-2181421136d1",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5b0ce896f1c2da584b089da607f409cc537cd6a70b0ad4ced9baadb5a591c160']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1bd45615-daec-45d2-bb1f-689ad10dc83e",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5c7ef4d50a42260d9c72be5b7db1527e1c103bcdd3569ebc4cd056f6e97eee7f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d7a692e4-cb9f-49b5-9ac3-74ff7b30f296",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5efc7daeaf2173451cc9d4de68b1fce1ac8c11724e8cf677ae8bc7deeddd3cb6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--227d6129-9ca6-494a-abf8-3221f331e491",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '658b825805a79f32c7d0fc4df92d3a6ccf36abd456b107a7a25e0d7c52fdb2c4']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--19898995-d5ff-44f4-9616-e61e032f2ffb",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '66c2f6e23c9508b6ed678672ccad376aa98ed1d084ec6c39c6fffbd4ffea28b6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--568764b5-3a05-4c52-8271-6186353fe039",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '78924ae85998d13693f09ccd164e9436483029a4fa028a5574973342dd473715']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bde723bd-f717-49f1-85d0-88c27f309c55",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7b0543c8f05b3925ce1e46d8e6540b640691c61bb2e0db9418bae560e3902b2b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3e03f133-0203-4cd9-b5d3-dafd0c607a74",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '92a9e10a08d4306262ab6b791a52f8fe70c9bd82de7121dcbdf2cb98d23fe6dd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9aa055ee-126d-47d5-945c-e14a61b52bde",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '99a9006e489ece97c7c36db82fc239182b8ecaefcd002af520e7d2e4451c4543']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--edb34a4e-d615-4ee3-b013-f624be40c25f",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a8d6cdc8df9e87456d974acbf3c7219805fb00da345aadf1cb92cd52ee44a009']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--769dfcdf-d52d-4aa0-b49c-581d551a0f6f",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ab7f331aface4ca23e2eaffe9e20d362c3763662966bae052f664994a803b40f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6610005c-1f03-49b0-a0fb-4bf22209afe3",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b0d56c7af84fd5088659543f257a7ea07986cc79b5a3686270075c69a64e917c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--526a297c-8053-41a3-9782-b7490c17b598",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bbf850935f1166f85ea8d6833bb3fe0519e50b7ef22868c4697f9bbc6383e9a5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d8046697-be51-4309-bdbd-5252639c077a",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c60743f1b5204b82702f6d0144593444897a0fabd32de2410aa9363eeb3fd204']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--94c0522e-ea50-4c72-af6e-827b5faaf902",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd3e6debeeda599bc6c243935cc432f6eef52fec0491f8f9f330a70994fc64ee1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fc855682-3995-4b8c-a215-0c36d44be70f",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd8c23da86a1fc4213579efe78732d5c98250a895a564bf6fb39f02a4832650c0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1a815f36-485b-4368-b580-0c15bae343c5",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f1f9fdf4403a58ca0c78a126f1a0496afc0f374d85958766f3d7a1629227ce60']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--abbcd4db-bd30-4d80-b159-4a4a28a357fc",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f8d259a67c531f90e13d58397c153a5fb112d0e9c19c3909258a2c461fe6bb95']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--58e244dd-34ec-43c3-af41-a5cdd1ec8493",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1087483ba137024a97d09e162497a7fe1e4a5c8fe5b9abefdd804bda35ccfb40']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3688304f-8bcf-4eaa-8369-94e87037b25e",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '11a120766b864e5d64e69243a772a9f02404127d454acc18b3da8d71d7c80432']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7c1d8a68-0eee-40a5-a941-3dc920013598",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '15b316d0d5385147d5b85e5b940d8e6bf664c9cfe2bc32546e8b79b782bdc230']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bf5e8656-6854-4562-9fbc-ca5944c339aa",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '15c28338b6bc3ade51a5054d532cab12300a162e88d61ed7e31319ba4d9bf160']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e2406366-8d93-4df7-bef0-85c86582eb69",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1844cb426938fc15bb8eb809026c05a0f9dcedfe64aca3e8b06263e49c415e98']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dce2aec7-adf5-422c-bf69-3bf215e372ff",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1fd739c3a4848b32822198f2e58455de330bda07d18d1e4cb254f249c46dd435']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--634ea481-8fee-43a5-a76f-250c24e34206",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '357f7d54a164eb9abf535ea8d72f2dbdf7db3b85d636f67397a05ba5f80765eb']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c6deb909-2d8a-4d2d-b87e-d2cbdeadbb1c",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '4b512c8b390f88652a197a988384aaad4fde84300e41a3954829df0fa9cc926d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e6021561-1f6f-4145-ae2a-b3ea43d298f9",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5a7c5be18ab40eb69629b25353db969fb0d7c1a90a8aadc5c23d8c8b0bb3b3ff']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ec3b333f-cf4f-4420-afd2-cd2283ee4959",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5d212b5c62ac9032859e57365ecdc73dad35fc0fcb17392978d953bb4545a002']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e4b7b59b-39d6-49b3-a011-53a4a05e50e6",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '71d4699009430a0c83d4cb0f263e338b55004e65eb8aa1c3a507e9ef2d1407f5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d6a2b201-f11c-4e48-a407-2ff4595b6686",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7b8d265de467110c38da240fc9953d272047acfb657815ba6c3dd38e927beaa8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dc5482ab-5027-4ea8-bd57-a3beaa06dbc1",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '8ff75b74ad851d689abdfc97b13f0a233633beb3cb279f1f8fc2a439f86861a8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--696518fd-c2be-4f73-b480-d8ad7db6e1a3",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '90c43e333232ae0c7ad931f3dfb3458a932e457f96b46acef1afce7d460909a1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--953cefb2-0592-4975-926d-77e827875a5f",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9af500ff2d42427c53ed1c8578da4276b4bc9a6c7b707224e1a0460852e954fa']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ad730ead-b814-4e91-ba88-07e8866ea2c6",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9eb8ff1ac59a84b216204502ee462631d5eb3e48555f72c5a5836281d1abb1a9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8700b174-e255-4e0e-ba8f-4bb9c83af68c",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a4a924b5800e42d757d7bb02ab0798f1ec6c7914027f2791051f10b71cc36aac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--559e34d0-8b80-4e45-99e8-412e6a521495",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b4106b26d139e920021a5c5da4845177de1512884c3f6e095905897ed15304ec']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7d652b41-fb79-4893-83dc-849079d10d4e",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bcc01c9ddf5541c2552fdd52ebc0b831329f53bc8a186fc867e34a1dc67e766e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bef6c4d8-c056-4d85-9653-8faa176b5991",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'be0e9d85166bc87a99896e580128b0112bbe2ecde436505b8696764334d1822a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--33598d5d-dcd9-4558-91f7-3ca736204c03",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ce3774683464464b759c275e77a45b1cd2a45e91dc0f8b9acadfb44e6def8304']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bc1d1b16-012d-48be-a938-84c9b4d2cdb6",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ce8ba4e0c9bcd47063f3019393b1bd83f795766895b22ba868b2b858f65b2894']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3997f75a-a938-417d-b1f6-09aaf72b6910",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd4a66d1e776e3d0c3dfb29e293790ca00e8c4819703807108d933a66b0372a9c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d293f461-080b-49d9-b87c-ab557e019dea",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e3be112566a17c4f37cc8cbbce8af9a975525c1d7ecd6932c7f9060ceb046a01']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bb9c292e-1d01-4797-be27-953871c9a8e9",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e72370934733632938d79935f5f7f3e8079bbf068ac675c06f304f7a4ddb24a3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--69995590-5392-478b-b21c-0fd1cec308a0",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f7c636bf524e0337fdf57cf8da0a8bede5c041775543a91b180b320d53e94e98']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--75f86878-848e-4253-a16f-0978b83fe143",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f8a63bc1edb0a345ee29f55f93fd948dc3665e8e04540b5ea523ad9910d95844']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1c53f4d9-aaac-4c6d-af5d-d4e0e5814e8e",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fece4bae779013e7eaf4318452c4fc7e23926f939c63febbfe774d110fc81952']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9dabfef1-5d6d-4fac-aff4-d25ad4f386eb",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0181cad18706699a580bdc030b44ddf4c9da6ea180b1f02217595ad50a13649e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9ec2924a-0321-4e8c-892d-409c00c363ea",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '054e9f8e29c25fa2e0715932e581ca1f1797376c4cc8526f933ec4a84b264445']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a6ca027b-8913-436f-8ac6-4464d95bbd90",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '055681d35d9033885b79d8f1b5e2a5b84802467d7f13aa2841c4274d6c781db5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--00e4ec25-9fb9-47c7-bda1-8a6f8bf4d86e",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '05b9730ddf48a48932316f4bb6c8b7b12cb76f2543dd1771f20efaa1739f7472']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--71b6e99c-a540-461a-b61c-0ab1d5335b64",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0bb8d03bbb250b63f0f8d7b16e258cd87aac7a2b4a683393940e4ad806f9c87b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f248e793-598e-4a9b-8017-fc1b30a109ca",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '15abce52aaa4a15777d4634cc6bc0f5d5e4c6adeb6a791dc021f85d7597cff34']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--61fd4108-625a-4308-a1ff-68bb39ad1335",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '196aac46c392e8b80fee334d4e04ef457e08ca0f85dfc5f0111b829b0036b9ef']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--03e52bfc-fcb2-4563-bfdc-677eacb22ad7",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '21c719875be1dca7563f6f4f2d631e1dd2e0dd358e4eb278c5355d1eddf73b75']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2353dce6-1d4b-4ea8-95d6-3f636dba285b",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '25b38b9ad5ac434a4fdb226611ad7f039869d0b09ef8f66f30c9ce35d2bcd6db']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6013e59c-2ded-41b3-8771-1e256ffa2383",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '2ad56ae396285cce5df417b26a2b0d5680e4167f23deff2f056e822d863c43ac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--464b9dc7-e776-43b3-8a1f-c91116bd2ef9",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '32621b6bf9adc3a187bdd1a4be7aeebc105f10e0a787ac9b23b5406275380912']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e87ef67a-a6b0-4967-af44-ef3fc65eb89e",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '32f53b8ea81af7492d5e316584e50709e3530697937a67387312d21b1b0371c0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bd843a49-72b9-4c03-b87e-68167b4fb7b1",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '4d163744e5bc83e937a466c9055eb9f151f67a878db9fd69c35c47a6ca58f66f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cb507e2f-f94b-48c9-8e27-bd94fb79ed79",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5a3f4beadc4dc3081d511b291dc98ddfaf43ea47f3bcff8edec43c4d53109413']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5a75c111-c4b5-4f22-b53d-91bf18e47304",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '687ca028c454da88ddacc25254c9dd02bad7e44350092949341773863d52027f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5188e330-227e-405b-84d4-ba8f0453ec9c",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7577630eefaf720f51b313b250709cb3c31781a5c00445ac1b2f8f1dc0436806']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d083d443-5650-4acf-82fd-97aa0201f649",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '767602240f255c7c08ede0cc694d7f25944c57f7ad57dad4ec69af4e3173ddf4']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f2114a31-5019-4e13-a7fd-aad1bd89c83c",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '774e5e3cd2bfe07f086220fcf57f674d766d5c58e602531d9be66aff46372c00']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--65e2151b-512f-4f2d-883e-e9f5a9e066aa",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '88d8ca279abbd57914e441081bd5635df6c6b78ac5bbcaa024d90329821a0ebd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d0efeeef-9f3a-4065-a1e9-376276ae42aa",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '93c96340199326dfebd1188f123844a42d213410df37c9b0b208c6a6da2a29a2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--84b769fa-b9bc-4c2b-b337-3bca8c5c1c45",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a09ec666e7d36d2ee57f9b8bbf5ec56601ac3fcfdd77d2675cf1bbdb2e87a4ee']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fd075e5b-c4e3-4780-81eb-53d7f2d35965",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a297ae33a57a557183fceac371d9878f95003a1380a27bdbed2f43b4b8874346']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4c3231ab-b6a8-49ad-9c73-198e21a391ca",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c4fd956a4527d9a984278ac3277380e304c877d953282408258622375ebcfbbd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--25aca774-8a9b-4c14-8a97-d01bc276e10b",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c8271020640de1a9d187036fa2aa57214644a3942446acff0a62da41c6db16cc']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6a7877d8-2002-4014-b754-8681a160647d",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd1566a855b9427fcde43c18c1e9d8371dc0093afcd13ef637895af1e4e2bd002']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--69d57eaa-c93c-473a-9d9e-ae638d2c0783",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'eb20b842c2f285a10fec04e064f06553902e70ce42aeb1653a802cb4563f9d80']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d1b78fdc-d8c4-46d7-a49f-3206ae09e02b",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ef85166c806e2685a5a0e56d77c574ef21af6adbeb9d8067ac82de287897a960']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--998b5b1b-5a00-4f35-b5c0-15d9603a3b53",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f4f4945f40c04c43463d9502cd6efbd291e79c0038d88a93957261a7d68356c5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--68ddaa81-ac0b-43e1-8b66-849f2a1c2334",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '074a569d024a213dd4d139b7ccb93672d8daa40c546bdc7fbc782c732c6c78e3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2363898b-43b8-4a8c-bcb9-32288cbcef24",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1231f13c1b77f1d94b2dd175d41aa9d98273e332bcf4b8a70e34bb20a1d03d00']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--76652539-11e0-436b-8ff7-15a9e42b50a6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '12e194238e89e11b3a44065852848baf6d680fb01beb75cbdbfb0c5a6aae9d96']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ee231070-17ba-4158-b1b7-16d0d5830c25",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '153ed75bd5b22ca3ebfc455589e0d930651f92f7961476e5275b33f0160592db']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--088a9f67-baa5-4240-b3f4-7927a13837ed",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1b6f2f6abe8d1a333cf5ea0afcc98bc572ac2c50176f044d7bd5ea928af2ed30']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8bd7e830-0c10-449b-9350-07269b6b6adb",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '2d6f9f1288e65bba7117be32c7e6972281200f1d75a648ee0a842fc79725ddb1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--861969b5-8d9c-4b97-9465-c65156d794d8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '2eaa5d9397598138206c4264723babd12b590769bd259c31e41a901ae8018d27']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--34b47bf9-012f-4675-a9c1-2b492fdb63c2",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '33fd0bdf49d78ea01743ef2685bbce2b88f49d9ab6b26f7c1cfc330f5dfed03b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--26e7df13-dc9e-4273-9da0-c77dbbccfc51",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '37eb44f7067138300caa9331fb93e1a99b86015333d2f9af396f2934849cd534']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5a2ba418-358b-4151-b10f-a24a4f55c63d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '3a7acae2c7f773ea79076025cf3748d4ed767804264f08f49722119e99b2c477']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--93820631-71cc-4c96-aef8-31898f98a7c4",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '3e09d56000216c730f880258f97f9d2bb0222ad59444c8bb00c2170f65c98e69']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6d4a1e08-ee0c-409f-b805-f2d2120519e7",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '40fa3d1532ecfd655f99d4b295cf29a947578cbf248b3f3bd4cac3e91e3a98f8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--81aaa86e-3540-4b98-b4d4-e967abf6823c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '49dd0daa9195e74d63a7b8e3e78e5cd311751fac80eb80134ce333635592e345']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--518d4f0c-1bd0-4b3b-b7ae-3b7f1760990f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '508f43a94c093913dc73dbf9bffd15d6a63e0e1ed52374352284fc969ca7d75c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3606185b-a166-44ac-aa05-e1ef28be5c05",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '527e27952bdf48a919586aa6bf526f1db9a1a411f8679e99c673c2a0cb3cc09b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4f3c74df-b38e-471c-ae47-530730283baa",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '558418b71b0d5055c320734a026194df1d95eee4f4658bd168f3f2cf08b6c838']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8e57a04a-e286-4602-90d7-e3c57d1151f5",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '58e5551e0a8b9c27b2cdf57d083792b5aac6d85a65a059e30443c44622762fff']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--72dec69a-df8f-4245-80ae-11cfa330de69",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '590c035b4167db406823c6e5dedbe666db73ab5d68e957eb40e061bc0e71ce2f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6f63b6e6-07eb-4518-a9c0-5f381cca3af8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5da379a6d60194aed042de555d7556b72477040e31d3033e5fafd46286915d25']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1cddfd6b-8c3a-4689-93bf-4b82efbbf47e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '6a5462a64b4f0b00bd7f33c6fa76bb84995cf7b62fabb6d9a3c2e21dd763bcf4']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0d98b353-37ea-4400-a344-35ab96b7afaf",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '6a7572a816528ae751c0c0aa4c083fa5850541936f6648da3b68de2cdadbf890']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f731857c-2acf-4eb8-9e57-70d60888da8a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '6ff7fa4ce31d824adffe3641d7a754e081b9bbe67059c2f84db7270299d1ac0e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e3752ea3-86a6-4d5c-ae0b-0bb6af29bdd9",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7ab66b7edf262874d7e897267ba69a9ea30197737c5df9c70f3ed15ccadf90ff']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--acba64e1-b3b7-4eeb-831a-d0ecd64fe537",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '92be3f4aa18c01d31c68120317c9cf8774380d983d3b562afea3c8ca918b5e29']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a0b1a289-fd5b-425d-8371-e3ee5d39c0ef",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '938dcbc77a364aba7b1898e6b4549ae7b79c080388488c8b7484814905e26f34']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--783fd03d-1801-4402-9cb6-15db8e596ffe",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '95305675b9535f24f9885974688b9c5430bcbbefe48db689c6dcf163dd2ec25f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dfeca40f-c5aa-42bd-ba7f-899b02dbd26d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'aa9b946c3d8bef248e531acf80571ebe2bd06821b80cd5ceb1632384fab50bd3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6bcc7e51-7490-4125-a745-85b2343a9e5e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b18c6c27a9df3521a6d85f68de971e33ba386dcb80364fd50f7402087476284a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9ec42c7b-1ba2-46c9-bdfc-691d6c43d8f8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b408ea5bc79226e62d41738c46a1d3343b5eb8383ffe2fd109f6665ad86cac92']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7e52489a-fa0f-4950-a0d3-a56ea7f7a437",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'cabdbbf4d1031d1bf42dc587173fedebe0bfd07f093ceaa05d87557bd1a2a62c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c915a6dd-4a28-4722-89d2-c1d5e6d19acc",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'cb01c2973a9a95fe148c0b675efcaa9bd696f5309ef9bfd8affe123ef161a5f7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--85ce66db-e337-484e-add9-7f61680494ff",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd57cbd24021bde3b323b13276e3d488d0167a12c63fe6bfaab54f056bf5b70fd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c4e20b87-f748-4429-a1d5-4b3527f2a78e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd914557a8488b729141ada90597985e548d6df07665bbd6c336053baa3c0e45f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ccef8238-919d-436e-a23b-37765d791de1",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dc25482df95393e9f0c559534735326e8bd202acd6847619d8c97013f39d010e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--07a84f35-b2a2-484c-9655-1e581cbb36ff",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dfca0c46e5575c88dbc5b452e03caf9a901a0642b081976b02e410eb6c1f5606']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--088df896-30f5-4989-b34e-36be01a18a39",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e1e2257a321800a68bee242126b8cad62e31263a8fb7f687317c9104706aa517']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e5258a5e-70e2-46a6-9492-4c3184f1ee12",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e5825e0174d06bf397aa28e86336787d84bea71a4c80a6edb7ecf4601a878789']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1ff88fe6-f4d8-4ca3-9b2d-be699c9f7aa4",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ea2e5e4287ce1c570f8f7d8d46414523fec715be82092830cbcdf8c2154da692']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0a609ecc-8781-4ee2-843b-6eb39a1ee5e7",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f254ee4f97003bec2c845ce384fa38249cd22294d9d6ba7e6ab973be6fd4954a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9cb97496-b26c-496c-aa64-86c6f8bbe033",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f58d9e7e18512eb19f32a7b94d2a477ad123d7bbeff1689f2487367035371815']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--06979ee0-c0ef-4998-a4f0-4087e9b68848",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '02dea3fde44dd098f7bb7562617a8b3475a4c04728f16d61a195ade38957f62e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--959feec2-e024-49f8-9d54-756e4b3b5aee",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '04b381803469ad344515be05fe4b85347e55c0e8cc22e29a17402188fcfe1291']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--358d90f3-42d1-4647-8863-5a418545729f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '111e4fd49b33bf1ea5cd287a41e6a46eab87386fda163b91ea96aed6dc08073f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f1fbd580-bac3-4f11-a3a6-41d9a2f3077f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1c05b05bf57cb5ac9e63a1b490bf785a50cfc94ed2f5732c8e9a4b750b7f0154']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1414c90d-d68c-40f8-8c2a-31dc5394b108",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '1e1d07d2b3eeb3a27a16aba84973885bc76fa494a1f8dfe2f4c165717238c944']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8c44af8d-ebb1-4bf3-bc8e-95cdf3dd8420",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '36393d61a6f0f1bb28ed162aa375d447ecb7092ac276d2e7e3e54c13d15bb5b2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c6bd529b-b975-4787-ad8f-c66141374e92",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '37ad9b47526a05baa175c37557bcafaf1e5d41ce088497503f5b2f6abcb63935']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cf87a57d-8ee9-4f30-aad9-98bde32f00df",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '4cce755f6e0f4bf39388c676e66d9e3f19dc1164b70482dce616b793dfd536fc']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8dbaf78f-7f0f-4468-8ccd-733cd1268b0d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '52507ff90d624a6424515b71c6e1f2a9d6d3bacfeb0b6513696eb0d2e6206cfe']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--99dfd7bc-e42d-451b-9985-5e97ec683a45",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5ef3b2ae6aac4c7b6a1ba0a14d0b4283da20002a6deee8d0d9ae2fd2fce79f58']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9357189b-20ab-47f5-b9dc-0361f7e59182",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '613e6cc27b89dd6a1b0c10360e3415061f2754878e8032199ac1bd2552526245']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--808e773f-9e88-4b2d-bfd3-8c30df975bbe",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '745a27ec5a4d4ad6873f078225816c12431c63d4a6f54fe0c1a3f2f85429bb13']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2fcb2cea-f6a5-4d06-8907-1d8ee5e33bf2",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7aa755bbb27c07b44450ee8d0f97f99deddc990d17dcdb5d5cb7ca99be194c93']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7442077d-88e9-49ac-ba69-18b970b61a8f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '878aead2fc1b075822239d5b29f60602a077facf2131b8290b854023a8598172']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--29ecd24b-a35b-480c-bc69-c644732db006",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '8acb67a9fde2880a2a57ad4c4825c74d5976553d501197917484708920990c41']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--83bf3ac5-2de6-4d3a-836d-1d7649636820",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9d556431273f4a78e2e26f89f458d3cdca5af8f4c67dc06e23388f945cd068df']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f2f442fc-34b7-4486-94f9-670eaa0cea9e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ae1241f4a4787c0362285f91657c4f91722345c78bd8b986f8f5e88d6db6083c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--637a442d-9a48-4df3-b916-30e62505ad6e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b08438155360f5cadd56c308a01b63ece0538af7fe20cabd8da187ccd76262e7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--555035d7-8234-4b5f-a73b-1f853a16cac6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b64e5d6c16622c5659a7d8d97210a59bbc10e98f24ca486e470be0378d7a0461']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--77fcaaff-fa98-4873-a551-8b749005d6f5",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bd64725a7743aaba0654bc08057882effeb783bf39986940fadc6b15c63bd292']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--529a8044-08e4-4f10-805f-015f2d9989ac",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'be7d9c313e7cee1155a3325e31ad678c4ebef9c43dd01e1d0bd31eea3d3c5cd7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7e016a14-9458-4ed2-b941-e293f8e40a60",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bfd3d52dc69f8d15f539747367a17fd4e71f4353167beb2ee972c3ff0a60f084']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--27978038-df09-4dda-abbc-9cbab1de5d0e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c07d3bbfccab22760ceb555452cf7e07932bf66c3fa344064da5248b2c555264']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d85785fa-4354-4387-9214-83b7846b59c0",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ccdb7e49a3ac27e5b4416dc885e82b010eaf6ce551b99ae95d85460c6d4e3028']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1b639bce-dafa-4656-b913-d5d567387d3d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dea38546d1bd0e7a399f78b26836e0e2fa25ef449aab07046814dc7f36b247c5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8cc00951-2ddc-4ce8-943f-8a4dd0b648a6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dfc90dcd94290865cd98543c8c36df4c633ca278a7de22e086b72eed6925015c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3d1a3eff-906f-4400-8d21-fc9b07fa17b6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f3560844feb9f9cb09923fdfdace3eecc7fae993edad0a54ab2e8c895c80ea7d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c5acfef5-a195-465e-a062-cb7a2049ea7b",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f6027b44e8fb06d1eeba1602a4998fc7cfd37d77c0b8408d4cd704672f1a4095']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0425cbc0-d011-40f4-8e99-4ef95ef268ef",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fb68971ae9300d20b05bc04da9539606016a44f23e4e7237c8a4239d7f45a3cf']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1eb931f9-08c0-4026-924c-8c7b63b03a8b",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '0b600dcea7ebd3d8b316bd65963ae0a9cf06eaabcd78e6237b10dbfb35c4f3cc']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5385be88-6b8f-4361-98c1-358a8100d437",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '2d7e3e63207b4c7f2c7dd8658469c97fa73d2e45f7104de19b49654c44079e72']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8fb7afd5-5290-4449-8734-8285439cc01e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '337f0b1329d19d47e4697b20c8d8bd756626e90b356f121f6ac0b3cdf193ac20']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ee4b8b6f-0c82-4d84-bb46-4146bf066ede",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '33dd4fa348582867ac7ccec455f018a929207b16d1f3e6771fc0f7f2b91572e0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--09938da8-2e3c-4fd0-bbc1-ab74bbc002bf",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '45ef0cea3b608f167c3e3101a0f78a4290ccf4ca1164c355bf4d56ac4bf44c0b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5d3bd451-2ab4-402a-9163-2d7148cbe06f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '4c565810ae06d551174b32ebb5e309693be3ceb8fe9939ece971180760949847']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ba19871b-1856-4ce6-871c-da1cc04b48d1",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '5f6ace8d46faae452b7b3056db7c12df1847a63ce105c7d837c4965e7ee1bc2f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--aa8d1f7c-a686-4fb0-a4c3-a76af9ea467d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7bc8432933f4da8bc12c8eb85ee55ce1c55f10f965662b6f3ad332d5a4414ae9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--065a32f3-2c46-4760-8051-3dd3558bc975",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '7ec6df0cae345fd0c3bdb220c2634e52cbb9ece8755143587a546e00d91b2ad8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--95dc9fa1-a5ad-49d2-817e-1477c1aa3fe6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '94ecec65874eef8917d8f91d11724bca77194319c8711aecec0f8b39d6db93ca']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d2d1edc2-9b08-4f13-84bb-4b4d3cce971d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9905aadc411eb351f590ab9e29fb1ba004cf61932584bce939b222de59c05b08']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8e9fa2e1-f38a-43d9-8bc0-b9276ed1456b",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9c7713ce0a1fa2ef4b43651ef3a984b1656a6ee8dc3a94c4682e5e5e86428373']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ed2dc387-3036-4aef-8d5b-5f8881eeaf61",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = '9e641b2840dc1edf0dc82878a3cc9ae9bae6b458169390da7160539d9dfd3aa4']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--58d33300-f07d-4cab-8fbe-b28a63670da3",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ab5ba540eae3608c2e2ca230cc60f630e51e612ee0d65253e0eaf7d42ddb2f55']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--52dbaf56-dbb8-4087-8b22-472f1951902d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b2b904053a6d1b783e597bbab0d0ac9cf8d33dfd06b06e7a9ab3d99a769dd10b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fd2f758f-231c-4548-a01b-3bec79939d7a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "AMOS sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd1a8fcbc867f2a098875628f4dc904618e0c4c29b1125244b02dee1a9a1d3f6d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 69,
   "labels": [
    "AMOS",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f46db97d-4b9b-44ee-a02f-17b330d3dccd",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '0de0ed1094b8857495a4b4914f15c67e06a1549952037e72c1651c7cc50a7b57']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--86adcb13-a39c-4fb1-9e22-eca5e6156db6",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '1802fa6cef6799deb57fbb42cb634047f255f310458b6a63716bb9cbeb3ae8ff']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f5a29074-bf2f-4dda-9d60-c1728a2eec85",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dd45b67a79fa5a19c7c37d06df03632318bce66bd750e0ccf8c7d8a55d53c8d9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6153d168-38d0-480a-bbf4-6c00e719c2c8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '07be1a5a5d75c8cf33a17f4379f13bbdf20f8e3b30df291934088759300defac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c303715a-564d-4b8b-b17b-ec74d9492146",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '087148ec3f18d6b8b699d0d5940dc23af4e3e7c920049c6c865254b3bb958ce9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b37961aa-cfb6-43e6-9ed6-76338c77dadd",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '1f2de816dd49ccf3074102b38902c1ccc81b1786d0789971bbfb70ec3fd2fc75']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ed8615a6-458e-424f-b11a-2bad7d790c87",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '1fc26715d960f204b10dcd967843728b552ae22a7647147deb8a6f3c86b899ba']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f2daf394-bee1-4d7a-aaa4-52d474d4db9c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '380a427f08c55b158cc0d90c38d3f741ea08a24a2811a2d9ca0c1d2dab5bfc66']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a2b4fc9d-370c-4d78-84ae-6f6681ba8290",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '38602089a296b98914abbd7939f0f94a9c6135b4ee839ab2aef016df2488e305']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d216fc84-324b-42da-af5f-16e4c873d5ef",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '44901fe5e07cb3a5e0d4e278126e40f491ca8c67eb431bd2fcf764568bc16a65']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--470584ab-a767-4891-b206-4567fa8cbc6d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '46eeb050ee375b52ed28cc9dd593e8b25fb148e92f01878d5bb073e9fb25ecb7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f1b4e427-9bb1-4b96-a4d0-d99a372fc679",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '47958f939631f1adba24b37c21a53bed74dd6179fa5beb0d2b912816ed4b7d8b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0363f15f-23ef-4cc8-9a74-607c7e57cd56",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '4fc7a8e8b3f31afaca715d1d1cf0e5fe99eaf1cc904168d84b2a59c9530cadf3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ee5f6c7c-d4d8-4672-b58d-1508b4785f48",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '4ffd58dd83a3f89cade6d58e13b5919410e0cf1f30afdbf60bad1f716a061ac0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1d92fdf4-ead6-4728-8c39-fbfbc80ec3e6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '501e191da3be2d085394eb13e133c40a59ee222bd45182259fa465c65698c402']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--39831961-3e66-4b9f-aa4d-9e88facc606f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '5b951b57c8529a2c09b4aadcc83376d7652c9674a61283fff443851d818bbab5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a6e03dc8-be9b-4fe0-a8ce-84203058ee16",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '5fc8200c7584303a0a9967875ce8050b95a9838b38e24ac0f35b595f79ca6217']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--94f4462f-4785-4994-94be-f59072ddf98e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ab25adf6f1b4b69b915555f1df2e7c4703b44a28a9aa0377e096b36c4bf406e6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c4c3418e-c064-4d07-b74b-1f3eb9cbc609",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b95779be1565278c9595423f93d8dc6bbdc4bda8abbed130f4f8924d03300862']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ce037784-f8d0-48d0-9441-6ee1f1f9ce50",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd5e40d66ee25be808e3d7bd0926ef0a95cbac0397752a9317db0c006ae4914d0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3a5c4a28-d99b-442d-ac12-ceeda9512a70",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dbbbbfb98939a25f1b2ab0e260aa01f7f6b569799aba107daf1cb17d66475295']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c300943c-152c-4d42-b155-21de3937867a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e1bc1d85b1e60ccf6d49c90677768d93bd4d65d819029fd6cdd7bbfb57b2efb1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--89a1a7bc-1d81-49e1-a23a-00e3ed71d222",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f374939c71458fed913b6ef0287cc4f01a3612d69f0740807a7e820cb9dfdd91']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d9caaa0e-264d-4489-ae2f-c44c4441a09f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f585889eea97199802c699315490ce258b23c5e244eb0a5d60f1b7b7537290c2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bf611eef-8072-4e58-8118-ddad3851bee8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '014e2e634bfdfc4ca6600898ad3d3ade92fcea86c9018c50bd057ef9baf8582a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dc9bea93-51f6-49b8-878a-55d1e5dac65f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '09f365cc415195f75e5aaa64137bb02d11d605e8c37b2783b93a383575ef4907']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--65a54cc7-4eea-42f2-b6b8-adc877d0a483",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '10ade0633ec156603a91201cf02607c93cca1ed5c119f2eba01628fc76da3ef6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2c33f60c-844f-4916-881b-67f950984d36",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '160499f60a0152f693cf24c9ed656db8a539173fd514380b15b882a3196a1cec']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e81df9aa-6621-450d-b596-c28fddb71b8b",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '1791781cf175cee025cc4ec4ed2e2d88a531e3cd6c8e979500cf03b3396fccc5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3573f912-fe4e-4ecd-8769-f3a5e950be94",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '191cc4b9334d555d3b24df5e6859391a844c772f2caec0197a6f11f04812625e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--14895428-263c-4338-b77a-77d1b17161c5",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '1d7975652836f4a11fa9a66122f9116ea2fca34f3766027c56dde3a5ed05e173']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--24d2ce28-ce84-44cc-84c4-c79086df0111",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '233f83c036e611b67c8e8245ba044b4e6e0490780c40b2426ef136e9e160c0d6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--edff68a1-c2db-4e2f-a447-840c4a0e87ad",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '24e8ebbd353ea0e870e1c0ad2fc1c36bc8c78e8b9873abbb5f0654553d6e6929']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--be5ee5ff-424c-4c9b-8ad6-5e11cd8e301b",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '290e3ab9fe0e54f01a3f7b13181171a499114e9059411d03060abc25967c541e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--00b0158a-81a7-44a0-8af3-cdfd7a49880b",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '2929f253115d67febdb458be1f235a194c628669d32d0348fc79af5e5b74a999']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--047cc26b-a02f-456d-8797-5bf9ca4ecc87",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '2b5b0ba9685b09277c3fee6c19e3ded60e57a72418f2550f2b1e43e00e1aebe8']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ae2d42e0-d164-4021-b231-312585aa7315",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '2e093d09ceb674fe47e130112dd38e753acedf1fec9e947149a7a2ca7d584fdb']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--961fc551-13df-454e-a43a-8598c7ca5d1c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '31fc3a8b0078ac1a731a950190db70cd353030f78b5eb0cbc4b2003d29085c7a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--85fb2f2b-da2c-41d1-91e6-8ab355027618",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '323e30b63449264be7a5a86c6e921e13ab885cda92f4ada976552569428fc73c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--da5252a5-b524-4ec1-a3e5-28df4e6d8c4e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '40e9b126f8bb5f22edc73f085b65ee27b3070299dd85426a9ce7ad60900ba2cb']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--139c6cb6-f3f5-4627-aa8c-cc36e7f48aae",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '42dccc9748790d8f8f392ca08dea047867013a0ce089ea414a35aae1b1e7ed11']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3e2aac35-fce2-43b4-bf74-5e9bd2fa50c8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '52c7a5b187fb9bea6c6e5eb2f49e08b43b64f6d61ee8f358ad097a391fda0099']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--95f5fd69-baa2-4761-a624-2cfdf277ab8c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '5d403bcc82ff51825cd2fed2a98b651c05963f8e73d199c7c3ffc82deed787fb']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f35ba6ef-1284-497b-87e7-f2c1d11c9017",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '5f473efe13de1c5e72ede7222aceb052c5f171cbf6217b68ee4093aaecbb852b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c2b88ee5-201a-4dd4-b329-c8d8fbcb673f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '70473b5416d501b66e4976a352dab4a8d19080bd4a2d8e5bc86a7b48209d3020']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c34bc52b-8f83-4137-875c-89f1d01904c2",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '7cc069a862258bd7ebfcaebf5bff72cc9ffbcb10e5ddb514a92dbf08f10d94fe']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a629a682-9b76-4266-9583-0b2f6448216c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '7f281be0e278237d6b2f37f22174067ca70c721b4e20255659345890b5fa027e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--88912dbe-fdaf-43f1-8d25-d6c70ddcd557",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '853f3819f6be301b48b1f944ceb2f3d5286de5416793a90e5924f31860e195a1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--afd7c992-fecf-4402-a66c-9fecad42fa5f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '97d054cfed1d1beab0bbd4d80f5b683576269cdebcef05d27982f1269d9acabd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e1c933cf-ad2c-442a-8389-8f9771ee4faf",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '9a8e80e8036894c1aacec28ac2fde83d9cf4d7b57347ff6f4aae4191a457af81']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a745e84b-7f53-4bf4-a12e-c4b694698602",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a3800f635ac2f8ef6f9c6dab83df0ec17737dcb39a1291147433a933bbf8c518']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1824ff3b-2bd7-4be1-8d62-dcb1c91b43a2",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a3ee8f8262e6befb1643eaae4763b6377050323335809fea2644ef270dd0e08f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--238988fb-79c7-4577-9a95-662c8c3aee08",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a4389db74221b51ac7b1d60e30c954c20f639af06e2aefd79a57c1b3b137cd02']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3f4ebe8f-b640-43a9-9352-63f408eff9f5",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a6e36dc5448b4312239bd33988ec5e100262b8398c312a2dc1203020a910565d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7b03c23c-e2fd-472e-878e-7650fdfe8e92",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a98bde8380570069f860bd02d176fdf293c1fb9ad13e7fce88b057e433fe4a2f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--72e2b5b9-e3e4-4151-87f3-066a1470d485",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b051bdb181f635f1c2c32e9c3636077485528faf806d2fcb41cf1cd946b9c24d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--776caa48-385d-4baa-858e-00c33c3614a5",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b8ab7dcb982eb6c2889bda259d85c8cd86001cad2b8ee22aa58662415e3012c4']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1d5d5f2a-9b3b-4384-b199-573de71bbf08",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c1fd09cf0ff586a467b17411834506093c74a15bc7df4dc0d595123075e3edbf']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e7201ce7-2188-4e78-bf1d-2b5a077e6f7a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ca4455bd766b2c3397021117e1410575f5e5493deb9ef6d42822be5a7db5c56f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--639a4157-0858-49c1-b5d4-1da7b4ecb97c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'cc5353f305b429e76a8b6f15db16a1472803bf22cbb1ab4de4359311056327d9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--104ed875-b64c-4ac4-8d6a-e4a784138a60",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'deb1f5d8b7de5fe4b2370147a0a7871867b07edb2b72c2fec4ff191526fb0126']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--08c20f6d-c4f8-47da-949b-a9aa1c2a5a20",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e0fabbd75a800c5c18bab1a50d8225a0282c18f966acd76e4a4a914163940d14']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dd113e5b-29d9-4817-b312-6306d945c149",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e28df40dc234353fbc06390833e0305a2e7bcd150e324cf9b0812d0ccc27d932']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f8dbbfb0-8a2b-4e0e-aa34-9420c04400fc",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e8b928fc2ab8a4d9006978c53df7608a7e4bbf76810731d4f24c475032dd44ac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dbd0ec30-6965-454b-ac5f-029ff7546781",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ee8fc0541885fc8837a07d4aab4353bd91b78110bdd297dc94d10ba0451a2952']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fb35d5f6-d2c3-4f59-b738-ed6d9814fef6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f1d7fda8e42f2f6376d2e2ed4192b291a882ba29c5bc55b0745e218c10074896']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0901cf3b-b255-4cd0-bc3e-870eb88e530f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f2c33bee5bb42be519c8735151349bcbf8d91a749be7604ad5c970054195831f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cb026b91-c629-4785-a0c1-dc536d409a79",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'fea6e379e5864f824165cd54548ec905672862fbe3cabfd04b7c59bb691541e6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--77531c03-a6e4-429e-a31c-deae889aaccd",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '1415386f9e93f07663f35e9bc7a1ffb7c718b4b412926bad675a439617bdd3c9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--569591dd-f147-46dc-bf39-a86b401d0255",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '164cc4f36a05d5c9504b3e008ba51b137a5bae5e4b24caef3ba318e4f1e938ce']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--85f1f18d-3b2a-4e7e-bfe9-2b8006cf4f31",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '17badb0a67d95ed17340deab6c7376ccca9dcf042509b78846043b6421f78bae']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7834143d-8b99-4a16-8a4e-e40f45f0599a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '19fa5d9b2bac0ac80baef97697847b7f8e5ee26bd481dbe35ab0b7990fc7f581']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f61e344b-05e0-4a99-97c7-075e455e05e1",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '254808b0440e1b04eb89d8127c16a7f315e943b29f6d1e4ae798ea0ee8459085']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a7c1c6cc-ddb2-4225-9546-26f0bf880c95",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '26be87bb1404191bc54ee58701576b895cc5ca4dfc2a463acd9594426a79b43e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--04bcbbf4-d87c-4ba9-9415-11019a7eb609",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '30d32dd9732cecba766dacbfacb26997f88cb3c2129f9229910269c57f851af9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--24da5537-2c30-499f-8e2f-04b98b0137b8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '31c7c478088692f8baca0364145668f88500b649a7e006afde43b00d4bc27cac']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--553a7161-0202-400a-afbf-9c881a3f4b0c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '44d8f0ca7f8a9b9a9d6af927b6b42fb4a95950ae5787ec25fcbd89b2bea285cd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--006997d1-6793-47ac-a344-8c33a800304b",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '479a45ae6b92aaf022490e58c0268c307ff28b56f3ce18d941336a685ced677d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fbc3eb6e-0221-400f-bc33-c01d3ed08f4c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '53fd1bcc1e44eb09bc6b6bbf1fc78db617290f0939861a8cb67f47e82eb237df']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--71dfadda-31ab-4959-ad2b-bac0cd743a6f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '5c9135ff03360664296e9149e10fcf398918d4c2b1b5af182a16042d37e3911c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--75521d78-f72d-427c-8f78-550c74893bf5",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '734d7490aa3f346aaaa2d9ef9b074940155784aad12180447e5ac3450b5cc02d']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--16043a17-6104-4b18-a9a2-c0b5f8e446ef",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '7a6bceef42464be9148c4c0129c0b62049cf384d1221119abf01993dbfa126aa']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d3db2895-9642-4486-8399-f209eca79ac6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '7ac995cecb447a5aa3d2611c81602efb1f3d22fc3287c07c82543985caaa2ad5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dd29e521-ed2f-40c1-977d-828dd1ca7068",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '851101eceec9198479d74baf595d1d8ead9366bbac435478a4d40286a9c15c23']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8b8dd74f-5f38-4074-b206-ce736a9df2ae",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '8bc7afc9352448b2aa0696fd74fd848a2c6ca3929221b00c4d4f5a8890f33a01']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e4d1a2fb-70c4-4e88-b912-083ff0d42c03",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '8bcfb1762441fb529e79519bad9e6754e06ad85f60e40a4c571caad8051bdfff']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c0c14b69-c20c-4169-a4a2-44ca66da0c37",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '8ebfefb89f67bf1c7e02fbd992cbb39b46c349faaea4138c12a99047f457fa0a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--149839fd-181d-478f-ace1-644911f0bc59",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '8f731e155026650e1ca808c4b1a0e062fb14c7ba42d927cdf310781178a2fbdf']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--78889530-4d79-4770-a2c4-7d2fb9d8c62d",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '95def1a0019325abb321e66c59553525223409b757f915838a16db6c42512402']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--49e1d637-a30f-42d9-bdf8-2d70916ad732",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '99245e159a90a58c2effae1723a7ed6dd61c844b7d857787ff0a6cab98d3f232']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4c89bcf3-0db2-488f-b098-ec18bdeb9344",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a55957fbd49764aa9c66fb47a72201f879fe069172eb6015dbb9b2018637abb2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2e2d4ef0-50ee-4f59-90d7-8543088b4a4e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a8c270f45d7226e1408045974f6811b039cdce421a32221889149a8eb3eeb0ba']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fb360168-f7c2-4a5c-bd38-550c9e0790f2",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'baaaf98788d8393e448d542c539a286dfedb20b7c3ecb1faafbd95afb6c7ca75']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6fe4d1fa-eb66-4fae-87ee-d196b9a636ea",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'cf3087a76f6ddc2aa742f797a56631b1c1c700a1452bd937a57f20a486749ab9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--036f72d0-c09c-411f-ad81-f1ce8e2f37b8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'dd50a17845f8c0cc2d08afadb32dc7ff299e5abe4ecac5fa750b0be69fed6090']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e55e3b34-e318-4dd4-8f0e-1f11d6d6f45a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e2643d3674d0c73237b44c7a57c84f053f67c24dfeea63fdb1e9b157da4d16c1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a88a0c0b-86ee-4d0f-9717-663b7a53662e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'e82559fc429d6194fd92b83210248cc91423ac7ad051d7e279864925edde21e3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--131559dd-0e34-48f9-bc1f-27ec88000b7a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ebefeec29f7d577767e2c6382669bdf98a9da2d371876679539673d834033b71']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--762c448a-b0bb-4c21-81b6-d1f7caf739bc",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f179a3e2a6c2336ec1a2cb62ab050927437976f61ef99101d3f6c73e59bea302']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a612f85e-1750-4d6b-8dd7-13365f1603fc",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f24f7daac0702a14caf47370d31ef1bf4b3694dd317912192a31493db15650ae']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6dd8e6fe-1a04-43b5-994b-2bf3b5d51cd7",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f7355fd6e1d6129a8056191248dc0d008677a33b6812b06068803e2fea18fcb1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 66,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b3a88ada-d807-4641-991b-42b4116531db",
   "created": "2026-10-26T19:21:50.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '6e136391f87beac4ae152e4f3f24ad61fb7b06df0fdb39d0005660ea1c5ea55e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T19:21:50.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f45ea740-e4ac-4092-952d-25be4801ed5a",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '36255615c287a027617380e1a6e1094006fa483e470c89ef9d0615527624b7c3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--39a1fabd-89f3-4628-af56-d54496fc98cb",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '9e18db120ac02fe1266b1f6af6956a3a728e79779c4c39ec7ab23294205c547a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f2504785-4c21-40bf-9b19-7492015dd3ed",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'aed321323d7f8d18f8a97abcf50b8e80d57fb85fa3877ca8ca0e6d5a0bb408ab']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3ad94578-1f65-45f4-826c-613e3398917e",
   "created": "2026-10-26T17:15:52.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f3f1ffbf525d56837674ce6ef0ab44fd8364f5aeba5f8c0ad8457ef638a2bb1a']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T17:15:52.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ece0fcf6-f0ce-4f1f-8591-97bdede66c73",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '41f63756cb911d7c249d7019272f0f27ed5e03ab8e720392c9060befe45cd161']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 63,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8ec47d33-babc-4493-9d27-41093fb0c88c",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'aaa91164057b1651321a53f2999f8035b8918be27c38ec4f55fe19c732bee818']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 63,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a35fc9b0-9ee1-49e2-8620-d62f0442582b",
   "created": "2026-10-26T15:06:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd6b38ae41edcffba8a8a4b39500238fc8d66115c4ee85ea8fa2295adfb53cc60']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T15:06:01.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9e37b449-8d85-48c9-a313-31e63cb96356",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '351c9637fe7766c6fd4341e15853b5086631c5cf466f2166681ad867fcd0f49c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c3a4375b-663b-464b-948a-a2bfd2a46e1f",
   "created": "2026-10-26T13:05:51.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '56665c1ad61818334eb9d373cebb9b18270bd89a73399990d42ee5d72f136735']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T13:05:51.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7a516926-98e4-4757-8399-598cd6fb3131",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '0647cc5b55ff4edeab21ad4a46d6f4903ba1ee0b70a387efe16bd34bb0056f1b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--68754fbc-7700-4dd0-b9c6-985b692336e0",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '09eccbaeaf9c3d2acc679c1992d7a054ff0904e34e0059053d35084542d44faa']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--432bcbb7-cce4-4278-8ef9-07031d6b6dc9",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '1c585c7b2fdb8c6e5e0f89342ed65051fdf9f7e58ec18674a89dc047ab36842b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6b087de1-9e7e-42c7-8db4-c6d1cf7423f0",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '1db0ce93704bde6b3eb5c7aaaa95cfb6cd1883c737c801822a1f4fb923b58ad3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a8cb7826-1692-41b7-8c57-39cc854a38b7",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '32077d21911b81602f6ca974d6346e0f14eff60a10e09aaa5e0b802bb442976b']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9dd8740c-f903-450d-b730-baf1799d07d2",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '52a8162b20c91d33084c66a48faff57225b59425053dae2f3fd3091c7c4c55b2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--585ccd4b-67be-471e-9ba9-3375b373d448",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '627cd4ae5a8a94d60b52546565d9bf86cc0926a60408d1d22f3a024e1b31e8c6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--538e8769-1229-4673-baa8-eb9c00bbb0ad",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '68add8af6bf69e784711e825b72f1a9aabb1626ba7532968214826718ba037d1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f3bf5849-fc92-4845-8da5-a2aa4ab8f5b6",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '712ae558638f3490f6b998628d2da1878a3c3c1e7d6565f673c8d54b9a4fec06']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bd999ceb-c332-4a2e-91f8-0d9c4e92db80",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '76a2c569415292d186f6c0fe8fb5fb9222f4e5a60316dccf6b6d427faa2299e5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c8917ae3-19a1-4511-a2c9-e7a0269f462e",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '96fb88a5f46e226ad093a9e1188cd9c765be685d811095e23e03419a2df843f1']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e3858900-2d8d-455f-9366-6b0f9395231c",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a045d1322d75f0842b910a77f19b420de6a3c9d847f71c03658f38334a3f5b1e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bc5e1823-23b7-4a50-879b-a621d2a71c10",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'aebc98473ccc033c28c99e885bf0a14cfafc6e16bb80c271ac95fc6e1a20eb31']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4b14612e-a5c4-4771-b10c-c77a53bb00ca",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b351696378f387e5e174be3f0ebeca8f481384800c1bfb471a870abd44e243a9']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2ac0806f-60c2-46bf-88e8-716b7d9ae045",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c4de68a0f6ca98238b1ce2b1172207fcd5475971d640e6e1b60ee063d85ca640']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7820d329-5aed-4064-b718-21e4f958ada8",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd709ed61e55621cc099da8522c5e8e114786819fe1952afa953b9dfe29d94811']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4482923c-af16-4cdc-ba0b-e3753faecaef",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd75517f9cee3363dfe8cd9f74855b3ece98cd994ba900818fa5ec121eb67eda7']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1d2d4274-5f38-40a8-8e36-2f518cb8d36f",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'db229ee7d68627647c54289d2c5302695324d4357e79252e29dfd1c47e9e16ca']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e7bfccd4-101f-454e-a7bd-1752bee0f6b0",
   "created": "2026-10-26T11:03:29.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'f3a1f6b95746874ee7ef01773448f5a2f7bdead3a4785788d24bbe8ffd75c006']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T11:03:29.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9d449b38-e0d0-4c20-b689-c33913b3386c",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '26c92d1fbffdfdb66755e5a56f81d0c7dd7d0ef4698bcc486d157fc9684ba377']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c802a248-1603-4183-981b-2b1624ab1e4e",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '2cb2c91e4a0c720557449b203b153a02ee74f42146dd20f62064bed102030574']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ba2235ee-f663-40f3-8632-d679e5a3a24f",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '66dd482fdb6e7a59c68aa4c2404a77c151705015e7a42b08b79dac0d2f97038f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--952bf3de-5998-4f1c-84da-6dbfda07096e",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'a27f7b764307902a907b1ca0439ea8061541f33166099b77e8bfdf33348d7eba']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--15d81994-2f95-4fe8-841d-20639b088e72",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c512ec6faadd7f2403b02be6a149eb316c7d76d2eb173727347f7dfcf1ec861e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ba538639-7f58-4578-8628-c3051b014350",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '3625aa321074e66100ed2fa56e46ca69ca2d1c710b47e5cb2e3e46fa67d1022e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a2ca2fcc-efdf-4f66-82ff-fc91fd7150d1",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '49bac78a78186901197fc2a003dd730697f1863e6c3d57c83a6c1dbaf8f127da']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0de1bdd1-4edf-4f4d-9add-dcbb99af3aeb",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = '521a6a40c9fd2befc6ef796588bf3b4d8f3d3252e7e32d57b31c083225c514c6']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e0ecf802-08fb-4cac-a3b5-3f3d4cef241a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '632a5f0b20063ab99570d0b40d5ca9bf80424f3ab5787cbfe5e4a715a41162b0']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--317e4220-eb18-4c48-87d8-aa28d21656a6",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '91f6d8d43971d6ad698b7c48fd5580181cd971cb3468b8f90be84c72642575ce']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--19766250-b93e-4a83-a970-a54cbef6b59e",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ad1c96c881748e684de8fe3a994400f3c5fe51320ff52d20bedb360411f1896e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--018ea473-d6f3-4d2c-bd34-c7a6a5c0a269",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b27757d81bb6de6fd7865b09378b05cbf6297604b4a200bb8c60e094ac5816c3']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5250be15-9616-44ad-b00a-10ac0ed2804a",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b742ddf353a2c1fa1e22bc10adf74fb00ef35aad98779022e5e86378684f2f4c']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a1297ee6-0464-431c-a646-2c5b28caaed8",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bd3f2f7d114b9a83080c7d40717c2a46ca26d04e8542442fbda28f35de86a2be']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a351f856-c0de-46c9-a5cb-ea47d31210d2",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown malware sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bd591e02e9d19c71c322fe489ebbcbc49e80b65851aaa1fea46722b1300dc6c5']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Unknown malware",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2c17602a-20af-436b-b7a7-fe574193b19c",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bf9d31d816c3acb190406f3fbeabfb810bbbab9a1fb292d4cc629c8da2237262']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cee877c0-1fc9-46e4-bb35-cadb1c3371e2",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'c156a2f26872b1f1591a26e5ab2fc83079c1a1d092a7415ca1e63fb627013e5e']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ee7c055e-c4ee-4a27-9994-325faf9aaf4f",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'd87a4f91a871643915d156fe396418afd6d682675d9c61db39b428cfcb4233a2']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8b0ed11d-2688-4e30-8523-8f73dccf21b3",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = 'ebb84e94c2f070b0cbda548d837e04763e45071e56450e02caa2303defb2eb50']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f85bae07-2bb6-44ca-afc6-125c80efc8ea",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '41d58c5548c6cba3c05cbd8f3b397cbe8199f1e474fbd2ba70bb2caaa8811bfa']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7f48d788-07e2-478b-a9a0-1845881ef692",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '15c2b1e6708311802cd82e2383a752524ad7687368627a2b381ba652e42998bc']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--08154d35-89ad-47c4-aa21-b148b540a174",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '3e58d175f08fe7a183330fddc222c0fa793054dc64ecb35645913b7ca464f498']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--576183bb-e342-4895-aa66-72900a9ac643",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '5ff9117937ddf3aca952e4948a05bb2af2e618dc6754ff58dbbfddc6b08f3328']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1b5c9218-8d44-40f7-a741-176ffe54e816",
   "created": "2026-10-26T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Mirai sha256",
   "pattern": "[file:hashes.'SHA-256' = '95833922db56e83f81393ccda8cef166a358aa6f9793c3582173746581ae919f']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Mirai",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--576e7f31-e5e1-4d0c-a76b-7154dcf528c4",
   "created": "2026-10-25T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown Stealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'b5906c5780bfb8d8535c2914e6a1029ef4137cd119995bf281058bd06236bbae']",
   "pattern_type": "stix",
   "valid_from": "2026-10-25T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Unknown Stealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--46ca9be0-5829-40f5-ba4c-fbd66e22e01b",
   "created": "2026-10-25T00:00:00.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "Unknown Stealer sha256",
   "pattern": "[file:hashes.'SHA-256' = 'bbf7f1683cf2e27ddd72cc11137a01077294ccc006b3fb701f7dd64fac7221fd']",
   "pattern_type": "stix",
   "valid_from": "2026-10-25T00:00:00.000Z",
   "confidence": 63,
   "labels": [
    "Unknown Stealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a2fa104b-99c7-4efe-8520-eb8318a05906",
   "created": "2026-10-26T08:49:01.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "SalatStealer sha256",
   "pattern": "[file:hashes.'SHA-256' = '3d9a86801bebaf5495e8c024623215ad6984b4b8a0cc1268391d951eeab8c906']",
   "pattern_type": "stix",
   "valid_from": "2026-10-26T08:49:01.000Z",
   "confidence": 60,
   "labels": [
    "SalatStealer",
    "band:medium"
   ],
   "description": "Malware infrastructure (ThreatFox-reported) | ATT&CK T1071, T1105 | sources: ThreatFox",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0"
  },
  {
   "type": "report",
   "spec_version": "2.1",
   "id": "report--b5a690c9-bff6-4c5a-bdcb-59b0816fbeaf",
   "created": "2026-10-26T23:24:59.000Z",
   "modified": "2026-10-26T23:24:59.000Z",
   "name": "threat-intel-feed IOC bundle 2026-10-26",
   "published": "2026-10-26T23:24:59.000Z",
   "report_types": [
    "threat-report"
   ],
   "description": "threat-intel-feed: curated high-confidence IOCs (score >= 50), TLP:CLEAR. Updated 2026-10-26 23:24 UTC. Count: 543. Each indicator's created/valid_from is the date it first entered the feed.",
   "created_by_ref": "identity--3238f2ba-6d62-56c4-a7c5-05c6ccafaef0",
   "object_refs": [
    "indicator--f1dc182b-e479-4a67-bf52-24ed73a2c7b7",
    "indicator--5ebaf72c-a133-42d9-8c89-1a0b43f34d50",
    "indicator--cfddf002-d319-40bf-98fa-a1107f0513f4",
    "indicator--27e29449-5f17-48e1-bd30-15a16c0430d8",
    "indicator--f4d9f0d8-baf0-4e24-b638-1501ef7dabc0",
    "indicator--4263741a-25de-4c0a-88a6-72b375cf3fc7",
    "indicator--008c1e1a-f264-462d-a1ef-71ab905510ec",
    "indicator--c9f8d436-b929-4d2c-8510-d92de6f62416",
    "indicator--38c5c604-ad41-4a35-a792-0c1d57f5bb5d",
    "indicator--7083d9b4-408c-4b73-a9a3-2682fdc65945",
    "indicator--bb676271-774b-4cc0-a4f3-ae420afbbe29",
    "indicator--9e51c88e-1766-4e4a-b77e-9330b0f20bda",
    "indicator--d39aa3b0-c278-4b1c-a6cb-d59ab26b1ef8",
    "indicator--afe371fe-5306-4811-af4b-ec55e448c0dd",
    "indicator--fdabeaf3-f41d-4292-9a8b-0eff1a71584d",
    "indicator--e44fcdd2-f44e-4ba2-aaf3-e3bc07399a7a",
    "indicator--e8b00f41-84c3-414c-b87b-eec5fdc1df46",
    "indicator--ef7fecc5-2788-4709-817d-fc4df01102ce",
    "indicator--e8d675d8-8fb7-400f-b325-212e1d2c7db9",
    "indicator--70afb0e2-8f5d-4e26-a8a0-e7091fce003a",
    "indicator--00fa6fd7-838a-4098-b162-ebe88a7a1432",
    "indicator--ecfb7f17-dd18-4da7-a8d9-6c73d5663cd7",
    "indicator--ee1ffef8-36fe-4532-ac78-dbe3a051b9ea",
    "indicator--b763e718-e305-46f1-8a01-42ac2ffc6e51",
    "indicator--b0ad8857-b82b-461c-bf4a-9602d2bfaa15",
    "indicator--1be58848-a059-4994-8dfe-fd527f4e3937",
    "indicator--8186a045-9875-440b-b4fc-bc94377955c7",
    "indicator--3e5f6b88-f03b-461a-a482-ca97f7202bda",
    "indicator--bdbc479c-1b12-4850-b27f-fb3813916d9f",
    "indicator--f1da85af-c5a0-472b-a5d5-636a0f9bf5d3",
    "indicator--919c14bf-be83-4e12-9bab-9a47e427b0d1",
    "indicator--13edf6a1-1723-4ce6-b974-11990f318e53",
    "indicator--6cc454a9-4319-4ebb-950f-67e945e8324b",
    "indicator--df8a9204-6a27-47a6-95a1-05b686560c69",
    "indicator--0af9177e-367a-4fe3-b137-7f0eaaab4010",
    "indicator--e1b091c0-11f2-4ac4-b421-570cc0ac163f",
    "indicator--c9b4be28-3133-48d1-8fb5-cc32de05b1bb",
    "indicator--86379da0-9239-4100-bcaa-169e06208fe5",
    "indicator--f0431f12-9cb8-4402-a791-6fd932c58cd0",
    "indicator--a4a686d7-cb2f-415e-9793-1c33d7f69441",
    "indicator--d6454833-3294-4b3d-afc7-ee05c5cbe7bc",
    "indicator--c7673306-20ac-4d68-99ca-9d9e56e8315f",
    "indicator--7d8747f5-6f83-4b20-b92f-c016d328ad2c",
    "indicator--3a5c2fd8-49b7-4363-ad81-b5beb969b712",
    "indicator--4bb9aea1-338a-41b7-99ee-82f78c07a749",
    "indicator--156d451a-bae6-4b65-87df-c6037887c52a",
    "indicator--05f1fa8f-ed0f-4244-900b-68b84b2a6f42",
    "indicator--b352140b-1155-4fd9-9c11-18352417b284",
    "indicator--01842ca0-2ab5-4c2f-b49d-73680ef5fc23",
    "indicator--cd4c6aeb-504d-4d61-8d7e-f19b4b4b7e04",
    "indicator--1dbe3e22-48c8-4e2c-887f-1ced10a76e51",
    "indicator--1d76af81-83bf-48e0-b030-25042d51383c",
    "indicator--cee0bde8-ad33-4b85-9491-d1a551af0423",
    "indicator--8e425b6f-64b3-47aa-af66-b67c269f3188",
    "indicator--eb0c9357-09ce-4d67-9423-3a37f38f5b31",
    "indicator--80c67ba2-0b40-4ca8-9a78-e64f8569b9af",
    "indicator--16dd85bb-c987-4eda-bee0-ab979d71ce0d",
    "indicator--5a8612c3-8fe5-4aeb-bba8-fbf2dbad927a",
    "indicator--1d702877-b3af-42b9-bea3-01541b9a0324",
    "indicator--e05386ac-ca74-44c3-9012-f8faf6b6db6c",
    "indicator--34a0088f-8903-4781-a59a-34167c32ee66",
    "indicator--889c0db1-671c-41c8-a86b-ed023560512f",
    "indicator--1fcfacb0-ab94-409f-a66c-b625703b2577",
    "indicator--ef494c49-a4ea-40f2-b69e-bdc5f6a0e82e",
    "indicator--72107c01-0436-48cd-a607-d39be7a4ece3",
    "indicator--4c9ba4a7-cc5d-4943-b9be-6bd7fe362abf",
    "indicator--ba6903ba-85dd-45ae-9e3e-c782953f860f",
    "indicator--2421c766-f507-493d-aad5-03d07b2c4179",
    "indicator--335bf1d8-8f13-4064-ace7-590bb4fdc36d",
    "indicator--e6ea2e12-2539-40b2-9d43-79052a62385a",
    "indicator--d42747ae-d6fa-4c6c-951d-6412c44e216d",
    "indicator--2e626a04-52a6-4c8a-a05f-eba7204f60a9",
    "indicator--96dd6e54-ceb0-4534-ad42-cabb57a8cdf9",
    "indicator--a075b5e2-a1c6-4d9b-90ba-0af606b5dff4",
    "indicator--efea559c-815f-4586-a201-d9287434b223",
    "indicator--4affee58-7577-42ca-bfa6-e27f86a17870",
    "indicator--0656cb2a-6167-4fd4-a13c-cd381ce20ede",
    "indicator--326709f5-af84-4f9d-af95-583586c5674e",
    "indicator--35805d5f-e5e6-4083-9b74-7c190dd00812",
    "indicator--23e967d7-60c9-4673-a712-45b09dab8493",
    "indicator--357bfeee-0465-4636-9c25-2a18cce2ef97",
    "indicator--1313f1e9-db59-4f09-a571-68206c724743",
    "indicator--4bea0aa5-d75e-4836-bd04-7e5366d7b0a0",
    "indicator--b3efd977-0108-4c4f-869b-339016661511",
    "indicator--f487f3ac-8bf7-4696-b392-96583c2381a3",
    "indicator--263853b4-8e6d-4d99-b917-6fc4e3ad4f19",
    "indicator--a5c739ab-300f-4e01-88c2-c24acef77a2c",
    "indicator--a7d4c0c4-be47-4f90-821d-3da266c240e0",
    "indicator--cfd9b97a-eb84-42c6-9ab6-775e033fae51",
    "indicator--2772d510-e90e-4c35-81d5-47f7dc85cc3e",
    "indicator--edeb0a7f-4c53-4220-8f2f-e710b0ac93fb",
    "indicator--6daf7d23-3efd-48e3-ad91-8220ad186e55",
    "indicator--d8cbdc7b-f2e3-420f-b571-5d3dd42f42f7",
    "indicator--036c1e43-e91d-4df6-8a9b-127d7167a1c7",
    "indicator--79771e56-c745-4613-b469-453094472ae2",
    "indicator--a20dac97-7f2a-42af-9274-11761b01dc3d",
    "indicator--94547efb-861e-40b9-baef-51c564d1f961",
    "indicator--862a55a6-e648-4b4b-be9a-2cac5abe23e6",
    "indicator--3e392921-f635-424c-aee9-47ad4d8480c5",
    "indicator--9385c04b-c3c5-4471-a4c9-bf806daa668f",
    "indicator--92b0a4e4-bed9-4e17-9c64-d47f1dc03407",
    "indicator--81d117db-bb3c-467f-be49-4c7fc25b0124",
    "indicator--49a5f94e-3b89-4818-a3ef-80fca5026278",
    "indicator--875a2cec-8d64-48c3-a358-afdfcf858745",
    "indicator--000bb687-c396-49f1-92c0-c257b0f8d749",
    "indicator--5ab0d01c-eaed-467d-8f3c-a04adb34c669",
    "indicator--4a282085-138e-44d5-b5e2-235105e97ce0",
    "indicator--f5a4c2ae-6dae-46d1-8cdc-af96b783a4f4",
    "indicator--7d08e5ff-b0a4-4bb0-af43-03e6975e3642",
    "indicator--27587813-e02b-4527-9fb6-6a21a14f3de2",
    "indicator--d812c12a-7412-4708-aab7-d8753bb5ccf0",
    "indicator--383c88df-9c0a-4763-a30d-0c65541bd212",
    "indicator--e6ab02b4-90f8-4002-8601-0a4e53c16aeb",
    "indicator--e04e3699-37f4-4453-b568-3496122b7239",
    "indicator--cc1bcd57-e7bb-4829-b740-2879634c925a",
    "indicator--8b3b9fe1-219f-4288-93c5-e04336c20dd9",
    "indicator--57afccb7-2a27-4516-8bbd-767708c4bb83",
    "indicator--13a250bd-162a-47d0-80e4-35b19a2976b4",
    "indicator--a4e9431c-1217-4519-a4da-7ff5112eb40e",
    "indicator--adc36d7b-3f37-4caf-95b9-0a2beb981b46",
    "indicator--f5ff7e5b-cf53-4afa-ba8e-77475055b10f",
    "indicator--815c6f7f-c341-4ee7-bc61-c7550bcd8c74",
    "indicator--8a2f445d-b05c-44dc-8dba-97fa8727cbb4",
    "indicator--f7e23b84-ab13-456c-97ca-ad3d5546e3fb",
    "indicator--36c48c69-bbee-4bcf-b551-028f006b1b20",
    "indicator--b6dc08e8-7604-4206-9d71-b1f984fbadf6",
    "indicator--90735fb6-38c0-463d-83b2-112d18e8ceec",
    "indicator--d7f21ac3-3a34-4b50-a9cd-ebfbc10e20fb",
    "indicator--57870814-de84-4495-837f-f0df3adac2ae",
    "indicator--c1f21e90-9c82-4333-bceb-bc1adcb36f80",
    "indicator--4fe4396a-fae0-4cae-8cd1-79607f67b316",
    "indicator--2452008d-3e29-4365-b2e1-62ea25da2fc8",
    "indicator--bfb18483-c39f-4676-9b12-5f0f1fb6ff33",
    "indicator--a259a167-f0b1-4f4c-9cca-59d6973418ee",
    "indicator--662671af-445e-4cbc-8f22-bd91dfcc5b14",
    "indicator--2d433796-5e72-415b-bcda-938712be8bbd",
    "indicator--e9417f62-82e8-4590-a0bc-efd6e5ecaa35",
    "indicator--db7bb516-8476-4e2a-beb2-c0c30dac65a7",
    "indicator--728c2804-14ee-43d5-a90d-514b7e4a1d6e",
    "indicator--a228c12c-f761-4f11-a5c8-332c8350ee37",
    "indicator--0bcfd3d7-ddb6-48db-9f23-34bf5d73c3a4",
    "indicator--8679489f-f80b-418e-9ac8-b335cf0819ea",
    "indicator--aeb90f4c-582d-4e29-be4d-163763f0ce1d",
    "indicator--8598d1ee-6ecb-454c-8729-0f6d4b93c964",
    "indicator--de855338-7655-42ab-abfa-d72fcc86e06c",
    "indicator--33b20495-338a-4543-a9c2-d1a53f07cb92",
    "indicator--ec9d7a1b-4d9c-4c09-8c70-641eefadf930",
    "indicator--911a1894-cff5-44b2-89fb-5d1bde3775ca",
    "indicator--3e1ef5b8-f1b8-4a49-a452-7fcbb0df11f5",
    "indicator--478e9ded-18c4-4ef8-be4c-c961efcdd247",
    "indicator--04a5f99d-4add-4760-99de-13f89f9bee2d",
    "indicator--d32b215d-7ba8-4db2-8fae-faf6675db9be",
    "indicator--89b24372-dae3-4a38-a87f-10d3b42fae6c",
    "indicator--69c35153-6b48-4491-8c3f-189c548981a8",
    "indicator--1dc585b8-b1a6-4cf9-994c-1188b3ebfbd1",
    "indicator--24c97d5d-6923-46e6-9fd2-71f73f37b7e8",
    "indicator--9d775fc0-3bbd-43a3-93b7-53d5017b2d20",
    "indicator--9f54dd50-02cb-4eb7-ade3-57828b9b20bb",
    "indicator--90f62fdb-4c8c-41ec-990e-bb61088c8dc7",
    "indicator--8a2f2ab8-8835-4a00-bcf1-e70637dbf8dd",
    "indicator--a75371d5-c432-41c4-9bbf-d91f3c2a8010",
    "indicator--43944682-3dfe-4e34-8705-d99019ca3d25",
    "indicator--b9b13232-53a7-46b9-bf8d-a36eda24feef",
    "indicator--322c072c-930d-40bb-834b-2933bb07ae37",
    "indicator--fc0b3c4c-759d-44c5-a28a-6d6d2ae69af0",
    "indicator--78f1298a-5581-4a2a-b686-f4c199ea119c",
    "indicator--b30b90bd-f6e0-4ff8-8cee-261acdad7fec",
    "indicator--ed275899-45ae-4c50-bffd-ee1cac947f28",
    "indicator--42ef4094-0ab4-4e07-b37e-662c17df32ee",
    "indicator--08429291-7c66-4ca3-95bb-4a7f4328a91d",
    "indicator--3adc2964-f648-45f4-8409-6438f9d5ee37",
    "indicator--22ebd6d2-99dc-4457-8f43-40bfbbf2d24b",
    "indicator--f01f12e7-08ba-412f-ab55-690a56d3e810",
    "indicator--f8de04ff-7664-4b38-88da-b232328677b3",
    "indicator--f61fd09d-3519-4805-9706-2e5326b8ac87",
    "indicator--aeb89882-d38b-4f00-8520-9c8425036373",
    "indicator--2887250c-e757-4ea1-bcc4-87383c118946",
    "indicator--a94b0bcd-03ce-4bfc-9a24-8102883edc90",
    "indicator--fdef4ebb-f7a4-47a4-8632-3802bab57598",
    "indicator--e9eab48b-72f2-4c00-b19b-1ca6bea61521",
    "indicator--1bf857e0-0db9-428c-a4dd-a1ab63ef77cc",
    "indicator--019d10d3-3d79-4966-928a-88dc84319033",
    "indicator--0150ab28-d93f-4071-8a44-2e0f0ca7990e",
    "indicator--690b510e-e1f2-48c2-9c3d-7bef30a50080",
    "indicator--b4d7b8b2-dc48-4b07-8271-be52c3c8abc5",
    "indicator--3e35bd34-c82b-41da-af13-fe0138f061db",
    "indicator--5c11754e-4b4a-44a2-ab23-b4588c026755",
    "indicator--9667c1cd-1478-4e58-ad85-5149e2485867",
    "indicator--478e145b-6aa8-4afe-9b34-a7f1bf97f511",
    "indicator--f36395d8-d3d5-45eb-97d5-f9de1878b3cc",
    "indicator--9eaef929-6453-4fe0-bcd2-cf83c7ae38a8",
    "indicator--7284d7f9-c89c-4076-8fd7-2008a2168763",
    "indicator--5634cf95-e779-49b0-ab87-5170206a4aef",
    "indicator--81106f4e-39ec-4c50-a018-5ff43b7a9205",
    "indicator--6337089c-ff51-4590-ac82-20b844ef7ceb",
    "indicator--a999684f-c408-4eec-b074-1b826b5cdf69",
    "indicator--f2204803-3132-4f6c-a5c3-5e3a0edef66c",
    "indicator--4b597ea6-4f1c-426b-ad46-b2cb06b4af79",
    "indicator--d1cc4def-77ce-41e8-a577-0b587901e9fe",
    "indicator--2f659a15-0f7e-4518-92cc-241ee6a994e3",
    "indicator--d41c4c00-5c7c-457e-903d-641c2ad7e47d",
    "indicator--64cbf376-ec12-4d58-91e8-3b28130f923f",
    "indicator--38c654c3-cf31-426d-a649-136b5fab7845",
    "indicator--92ee66ad-d6da-45bb-8e75-336a39a748ea",
    "indicator--61f4f9ed-709a-40f6-8b4f-b82fad3c778d",
    "indicator--5c8b5bd4-9fce-4692-a33e-82d7de09a6da",
    "indicator--bba0915b-a2cf-4253-816c-79a8ae931ccd",
    "indicator--5746ffc4-0326-42be-bbca-2d96bc4c6173",
    "indicator--27dd912c-40fe-49b9-95c0-0c8b6a4bbf03",
    "indicator--25871a96-4a9a-4504-8748-2753079ce95a",
    "indicator--0eb207cf-a399-4ba7-8d37-5f8e1452ef72",
    "indicator--cece106d-1315-4230-a02f-69e7684bd7f5",
    "indicator--2829dac4-edcd-40fa-ae21-ef738d49ce9d",
    "indicator--c4824bdd-e652-4a38-8197-778a6b986be3",
    "indicator--b91f7bc9-5aaa-4478-8ecf-67869ffb33c8",
    "indicator--e1ecd0f6-c6bf-4dc1-b0e4-8e23e0a9d799",
    "indicator--35b3c07f-0be1-4810-8e9a-72a9f6d37f3e",
    "indicator--ea60b100-138a-49d4-a87f-4604c71ad961",
    "indicator--ad829dbe-a34e-4f69-ab87-23ea716bc38e",
    "indicator--0e0c9d33-455f-4d8e-9296-cca7f55212c4",
    "indicator--f5430158-4e79-4c23-96f7-c84ea47757ce",
    "indicator--61f554e3-4092-4c4b-8304-7dc7b35d2ea7",
    "indicator--abcf7a3f-0591-4241-a0d0-491c8d6a18c4",
    "indicator--73c86332-3efe-410c-a5ce-2766bfc079a6",
    "indicator--4c433abf-7ad3-48ae-a081-e2f8090959d1",
    "indicator--80b71056-b399-4612-ac69-1ae899a14272",
    "indicator--0a71a465-56c5-4179-88be-6dfa6bc000c4",
    "indicator--0bad0bec-564b-4bf3-b98f-2181421136d1",
    "indicator--1bd45615-daec-45d2-bb1f-689ad10dc83e",
    "indicator--d7a692e4-cb9f-49b5-9ac3-74ff7b30f296",
    "indicator--227d6129-9ca6-494a-abf8-3221f331e491",
    "indicator--19898995-d5ff-44f4-9616-e61e032f2ffb",
    "indicator--568764b5-3a05-4c52-8271-6186353fe039",
    "indicator--bde723bd-f717-49f1-85d0-88c27f309c55",
    "indicator--3e03f133-0203-4cd9-b5d3-dafd0c607a74",
    "indicator--9aa055ee-126d-47d5-945c-e14a61b52bde",
    "indicator--edb34a4e-d615-4ee3-b013-f624be40c25f",
    "indicator--769dfcdf-d52d-4aa0-b49c-581d551a0f6f",
    "indicator--6610005c-1f03-49b0-a0fb-4bf22209afe3",
    "indicator--526a297c-8053-41a3-9782-b7490c17b598",
    "indicator--d8046697-be51-4309-bdbd-5252639c077a",
    "indicator--94c0522e-ea50-4c72-af6e-827b5faaf902",
    "indicator--fc855682-3995-4b8c-a215-0c36d44be70f",
    "indicator--1a815f36-485b-4368-b580-0c15bae343c5",
    "indicator--abbcd4db-bd30-4d80-b159-4a4a28a357fc",
    "indicator--58e244dd-34ec-43c3-af41-a5cdd1ec8493",
    "indicator--3688304f-8bcf-4eaa-8369-94e87037b25e",
    "indicator--7c1d8a68-0eee-40a5-a941-3dc920013598",
    "indicator--bf5e8656-6854-4562-9fbc-ca5944c339aa",
    "indicator--e2406366-8d93-4df7-bef0-85c86582eb69",
    "indicator--dce2aec7-adf5-422c-bf69-3bf215e372ff",
    "indicator--634ea481-8fee-43a5-a76f-250c24e34206",
    "indicator--c6deb909-2d8a-4d2d-b87e-d2cbdeadbb1c",
    "indicator--e6021561-1f6f-4145-ae2a-b3ea43d298f9",
    "indicator--ec3b333f-cf4f-4420-afd2-cd2283ee4959",
    "indicator--e4b7b59b-39d6-49b3-a011-53a4a05e50e6",
    "indicator--d6a2b201-f11c-4e48-a407-2ff4595b6686",
    "indicator--dc5482ab-5027-4ea8-bd57-a3beaa06dbc1",
    "indicator--696518fd-c2be-4f73-b480-d8ad7db6e1a3",
    "indicator--953cefb2-0592-4975-926d-77e827875a5f",
    "indicator--ad730ead-b814-4e91-ba88-07e8866ea2c6",
    "indicator--8700b174-e255-4e0e-ba8f-4bb9c83af68c",
    "indicator--559e34d0-8b80-4e45-99e8-412e6a521495",
    "indicator--7d652b41-fb79-4893-83dc-849079d10d4e",
    "indicator--bef6c4d8-c056-4d85-9653-8faa176b5991",
    "indicator--33598d5d-dcd9-4558-91f7-3ca736204c03",
    "indicator--bc1d1b16-012d-48be-a938-84c9b4d2cdb6",
    "indicator--3997f75a-a938-417d-b1f6-09aaf72b6910",
    "indicator--d293f461-080b-49d9-b87c-ab557e019dea",
    "indicator--bb9c292e-1d01-4797-be27-953871c9a8e9",
    "indicator--69995590-5392-478b-b21c-0fd1cec308a0",
    "indicator--75f86878-848e-4253-a16f-0978b83fe143",
    "indicator--1c53f4d9-aaac-4c6d-af5d-d4e0e5814e8e",
    "indicator--9dabfef1-5d6d-4fac-aff4-d25ad4f386eb",
    "indicator--9ec2924a-0321-4e8c-892d-409c00c363ea",
    "indicator--a6ca027b-8913-436f-8ac6-4464d95bbd90",
    "indicator--00e4ec25-9fb9-47c7-bda1-8a6f8bf4d86e",
    "indicator--71b6e99c-a540-461a-b61c-0ab1d5335b64",
    "indicator--f248e793-598e-4a9b-8017-fc1b30a109ca",
    "indicator--61fd4108-625a-4308-a1ff-68bb39ad1335",
    "indicator--03e52bfc-fcb2-4563-bfdc-677eacb22ad7",
    "indicator--2353dce6-1d4b-4ea8-95d6-3f636dba285b",
    "indicator--6013e59c-2ded-41b3-8771-1e256ffa2383",
    "indicator--464b9dc7-e776-43b3-8a1f-c91116bd2ef9",
    "indicator--e87ef67a-a6b0-4967-af44-ef3fc65eb89e",
    "indicator--bd843a49-72b9-4c03-b87e-68167b4fb7b1",
    "indicator--cb507e2f-f94b-48c9-8e27-bd94fb79ed79",
    "indicator--5a75c111-c4b5-4f22-b53d-91bf18e47304",
    "indicator--5188e330-227e-405b-84d4-ba8f0453ec9c",
    "indicator--d083d443-5650-4acf-82fd-97aa0201f649",
    "indicator--f2114a31-5019-4e13-a7fd-aad1bd89c83c",
    "indicator--65e2151b-512f-4f2d-883e-e9f5a9e066aa",
    "indicator--d0efeeef-9f3a-4065-a1e9-376276ae42aa",
    "indicator--84b769fa-b9bc-4c2b-b337-3bca8c5c1c45",
    "indicator--fd075e5b-c4e3-4780-81eb-53d7f2d35965",
    "indicator--4c3231ab-b6a8-49ad-9c73-198e21a391ca",
    "indicator--25aca774-8a9b-4c14-8a97-d01bc276e10b",
    "indicator--6a7877d8-2002-4014-b754-8681a160647d",
    "indicator--69d57eaa-c93c-473a-9d9e-ae638d2c0783",
    "indicator--d1b78fdc-d8c4-46d7-a49f-3206ae09e02b",
    "indicator--998b5b1b-5a00-4f35-b5c0-15d9603a3b53",
    "indicator--68ddaa81-ac0b-43e1-8b66-849f2a1c2334",
    "indicator--2363898b-43b8-4a8c-bcb9-32288cbcef24",
    "indicator--76652539-11e0-436b-8ff7-15a9e42b50a6",
    "indicator--ee231070-17ba-4158-b1b7-16d0d5830c25",
    "indicator--088a9f67-baa5-4240-b3f4-7927a13837ed",
    "indicator--8bd7e830-0c10-449b-9350-07269b6b6adb",
    "indicator--861969b5-8d9c-4b97-9465-c65156d794d8",
    "indicator--34b47bf9-012f-4675-a9c1-2b492fdb63c2",
    "indicator--26e7df13-dc9e-4273-9da0-c77dbbccfc51",
    "indicator--5a2ba418-358b-4151-b10f-a24a4f55c63d",
    "indicator--93820631-71cc-4c96-aef8-31898f98a7c4",
    "indicator--6d4a1e08-ee0c-409f-b805-f2d2120519e7",
    "indicator--81aaa86e-3540-4b98-b4d4-e967abf6823c",
    "indicator--518d4f0c-1bd0-4b3b-b7ae-3b7f1760990f",
    "indicator--3606185b-a166-44ac-aa05-e1ef28be5c05",
    "indicator--4f3c74df-b38e-471c-ae47-530730283baa",
    "indicator--8e57a04a-e286-4602-90d7-e3c57d1151f5",
    "indicator--72dec69a-df8f-4245-80ae-11cfa330de69",
    "indicator--6f63b6e6-07eb-4518-a9c0-5f381cca3af8",
    "indicator--1cddfd6b-8c3a-4689-93bf-4b82efbbf47e",
    "indicator--0d98b353-37ea-4400-a344-35ab96b7afaf",
    "indicator--f731857c-2acf-4eb8-9e57-70d60888da8a",
    "indicator--e3752ea3-86a6-4d5c-ae0b-0bb6af29bdd9",
    "indicator--acba64e1-b3b7-4eeb-831a-d0ecd64fe537",
    "indicator--a0b1a289-fd5b-425d-8371-e3ee5d39c0ef",
    "indicator--783fd03d-1801-4402-9cb6-15db8e596ffe",
    "indicator--dfeca40f-c5aa-42bd-ba7f-899b02dbd26d",
    "indicator--6bcc7e51-7490-4125-a745-85b2343a9e5e",
    "indicator--9ec42c7b-1ba2-46c9-bdfc-691d6c43d8f8",
    "indicator--7e52489a-fa0f-4950-a0d3-a56ea7f7a437",
    "indicator--c915a6dd-4a28-4722-89d2-c1d5e6d19acc",
    "indicator--85ce66db-e337-484e-add9-7f61680494ff",
    "indicator--c4e20b87-f748-4429-a1d5-4b3527f2a78e",
    "indicator--ccef8238-919d-436e-a23b-37765d791de1",
    "indicator--07a84f35-b2a2-484c-9655-1e581cbb36ff",
    "indicator--088df896-30f5-4989-b34e-36be01a18a39",
    "indicator--e5258a5e-70e2-46a6-9492-4c3184f1ee12",
    "indicator--1ff88fe6-f4d8-4ca3-9b2d-be699c9f7aa4",
    "indicator--0a609ecc-8781-4ee2-843b-6eb39a1ee5e7",
    "indicator--9cb97496-b26c-496c-aa64-86c6f8bbe033",
    "indicator--06979ee0-c0ef-4998-a4f0-4087e9b68848",
    "indicator--959feec2-e024-49f8-9d54-756e4b3b5aee",
    "indicator--358d90f3-42d1-4647-8863-5a418545729f",
    "indicator--f1fbd580-bac3-4f11-a3a6-41d9a2f3077f",
    "indicator--1414c90d-d68c-40f8-8c2a-31dc5394b108",
    "indicator--8c44af8d-ebb1-4bf3-bc8e-95cdf3dd8420",
    "indicator--c6bd529b-b975-4787-ad8f-c66141374e92",
    "indicator--cf87a57d-8ee9-4f30-aad9-98bde32f00df",
    "indicator--8dbaf78f-7f0f-4468-8ccd-733cd1268b0d",
    "indicator--99dfd7bc-e42d-451b-9985-5e97ec683a45",
    "indicator--9357189b-20ab-47f5-b9dc-0361f7e59182",
    "indicator--808e773f-9e88-4b2d-bfd3-8c30df975bbe",
    "indicator--2fcb2cea-f6a5-4d06-8907-1d8ee5e33bf2",
    "indicator--7442077d-88e9-49ac-ba69-18b970b61a8f",
    "indicator--29ecd24b-a35b-480c-bc69-c644732db006",
    "indicator--83bf3ac5-2de6-4d3a-836d-1d7649636820",
    "indicator--f2f442fc-34b7-4486-94f9-670eaa0cea9e",
    "indicator--637a442d-9a48-4df3-b916-30e62505ad6e",
    "indicator--555035d7-8234-4b5f-a73b-1f853a16cac6",
    "indicator--77fcaaff-fa98-4873-a551-8b749005d6f5",
    "indicator--529a8044-08e4-4f10-805f-015f2d9989ac",
    "indicator--7e016a14-9458-4ed2-b941-e293f8e40a60",
    "indicator--27978038-df09-4dda-abbc-9cbab1de5d0e",
    "indicator--d85785fa-4354-4387-9214-83b7846b59c0",
    "indicator--1b639bce-dafa-4656-b913-d5d567387d3d",
    "indicator--8cc00951-2ddc-4ce8-943f-8a4dd0b648a6",
    "indicator--3d1a3eff-906f-4400-8d21-fc9b07fa17b6",
    "indicator--c5acfef5-a195-465e-a062-cb7a2049ea7b",
    "indicator--0425cbc0-d011-40f4-8e99-4ef95ef268ef",
    "indicator--1eb931f9-08c0-4026-924c-8c7b63b03a8b",
    "indicator--5385be88-6b8f-4361-98c1-358a8100d437",
    "indicator--8fb7afd5-5290-4449-8734-8285439cc01e",
    "indicator--ee4b8b6f-0c82-4d84-bb46-4146bf066ede",
    "indicator--09938da8-2e3c-4fd0-bbc1-ab74bbc002bf",
    "indicator--5d3bd451-2ab4-402a-9163-2d7148cbe06f",
    "indicator--ba19871b-1856-4ce6-871c-da1cc04b48d1",
    "indicator--aa8d1f7c-a686-4fb0-a4c3-a76af9ea467d",
    "indicator--065a32f3-2c46-4760-8051-3dd3558bc975",
    "indicator--95dc9fa1-a5ad-49d2-817e-1477c1aa3fe6",
    "indicator--d2d1edc2-9b08-4f13-84bb-4b4d3cce971d",
    "indicator--8e9fa2e1-f38a-43d9-8bc0-b9276ed1456b",
    "indicator--ed2dc387-3036-4aef-8d5b-5f8881eeaf61",
    "indicator--58d33300-f07d-4cab-8fbe-b28a63670da3",
    "indicator--52dbaf56-dbb8-4087-8b22-472f1951902d",
    "indicator--fd2f758f-231c-4548-a01b-3bec79939d7a",
    "indicator--f46db97d-4b9b-44ee-a02f-17b330d3dccd",
    "indicator--86adcb13-a39c-4fb1-9e22-eca5e6156db6",
    "indicator--f5a29074-bf2f-4dda-9d60-c1728a2eec85",
    "indicator--6153d168-38d0-480a-bbf4-6c00e719c2c8",
    "indicator--c303715a-564d-4b8b-b17b-ec74d9492146",
    "indicator--b37961aa-cfb6-43e6-9ed6-76338c77dadd",
    "indicator--ed8615a6-458e-424f-b11a-2bad7d790c87",
    "indicator--f2daf394-bee1-4d7a-aaa4-52d474d4db9c",
    "indicator--a2b4fc9d-370c-4d78-84ae-6f6681ba8290",
    "indicator--d216fc84-324b-42da-af5f-16e4c873d5ef",
    "indicator--470584ab-a767-4891-b206-4567fa8cbc6d",
    "indicator--f1b4e427-9bb1-4b96-a4d0-d99a372fc679",
    "indicator--0363f15f-23ef-4cc8-9a74-607c7e57cd56",
    "indicator--ee5f6c7c-d4d8-4672-b58d-1508b4785f48",
    "indicator--1d92fdf4-ead6-4728-8c39-fbfbc80ec3e6",
    "indicator--39831961-3e66-4b9f-aa4d-9e88facc606f",
    "indicator--a6e03dc8-be9b-4fe0-a8ce-84203058ee16",
    "indicator--94f4462f-4785-4994-94be-f59072ddf98e",
    "indicator--c4c3418e-c064-4d07-b74b-1f3eb9cbc609",
    "indicator--ce037784-f8d0-48d0-9441-6ee1f1f9ce50",
    "indicator--3a5c4a28-d99b-442d-ac12-ceeda9512a70",
    "indicator--c300943c-152c-4d42-b155-21de3937867a",
    "indicator--89a1a7bc-1d81-49e1-a23a-00e3ed71d222",
    "indicator--d9caaa0e-264d-4489-ae2f-c44c4441a09f",
    "indicator--bf611eef-8072-4e58-8118-ddad3851bee8",
    "indicator--dc9bea93-51f6-49b8-878a-55d1e5dac65f",
    "indicator--65a54cc7-4eea-42f2-b6b8-adc877d0a483",
    "indicator--2c33f60c-844f-4916-881b-67f950984d36",
    "indicator--e81df9aa-6621-450d-b596-c28fddb71b8b",
    "indicator--3573f912-fe4e-4ecd-8769-f3a5e950be94",
    "indicator--14895428-263c-4338-b77a-77d1b17161c5",
    "indicator--24d2ce28-ce84-44cc-84c4-c79086df0111",
    "indicator--edff68a1-c2db-4e2f-a447-840c4a0e87ad",
    "indicator--be5ee5ff-424c-4c9b-8ad6-5e11cd8e301b",
    "indicator--00b0158a-81a7-44a0-8af3-cdfd7a49880b",
    "indicator--047cc26b-a02f-456d-8797-5bf9ca4ecc87",
    "indicator--ae2d42e0-d164-4021-b231-312585aa7315",
    "indicator--961fc551-13df-454e-a43a-8598c7ca5d1c",
    "indicator--85fb2f2b-da2c-41d1-91e6-8ab355027618",
    "indicator--da5252a5-b524-4ec1-a3e5-28df4e6d8c4e",
    "indicator--139c6cb6-f3f5-4627-aa8c-cc36e7f48aae",
    "indicator--3e2aac35-fce2-43b4-bf74-5e9bd2fa50c8",
    "indicator--95f5fd69-baa2-4761-a624-2cfdf277ab8c",
    "indicator--f35ba6ef-1284-497b-87e7-f2c1d11c9017",
    "indicator--c2b88ee5-201a-4dd4-b329-c8d8fbcb673f",
    "indicator--c34bc52b-8f83-4137-875c-89f1d01904c2",
    "indicator--a629a682-9b76-4266-9583-0b2f6448216c",
    "indicator--88912dbe-fdaf-43f1-8d25-d6c70ddcd557",
    "indicator--afd7c992-fecf-4402-a66c-9fecad42fa5f",
    "indicator--e1c933cf-ad2c-442a-8389-8f9771ee4faf",
    "indicator--a745e84b-7f53-4bf4-a12e-c4b694698602",
    "indicator--1824ff3b-2bd7-4be1-8d62-dcb1c91b43a2",
    "indicator--238988fb-79c7-4577-9a95-662c8c3aee08",
    "indicator--3f4ebe8f-b640-43a9-9352-63f408eff9f5",
    "indicator--7b03c23c-e2fd-472e-878e-7650fdfe8e92",
    "indicator--72e2b5b9-e3e4-4151-87f3-066a1470d485",
    "indicator--776caa48-385d-4baa-858e-00c33c3614a5",
    "indicator--1d5d5f2a-9b3b-4384-b199-573de71bbf08",
    "indicator--e7201ce7-2188-4e78-bf1d-2b5a077e6f7a",
    "indicator--639a4157-0858-49c1-b5d4-1da7b4ecb97c",
    "indicator--104ed875-b64c-4ac4-8d6a-e4a784138a60",
    "indicator--08c20f6d-c4f8-47da-949b-a9aa1c2a5a20",
    "indicator--dd113e5b-29d9-4817-b312-6306d945c149",
    "indicator--f8dbbfb0-8a2b-4e0e-aa34-9420c04400fc",
    "indicator--dbd0ec30-6965-454b-ac5f-029ff7546781",
    "indicator--fb35d5f6-d2c3-4f59-b738-ed6d9814fef6",
    "indicator--0901cf3b-b255-4cd0-bc3e-870eb88e530f",
    "indicator--cb026b91-c629-4785-a0c1-dc536d409a79",
    "indicator--77531c03-a6e4-429e-a31c-deae889aaccd",
    "indicator--569591dd-f147-46dc-bf39-a86b401d0255",
    "indicator--85f1f18d-3b2a-4e7e-bfe9-2b8006cf4f31",
    "indicator--7834143d-8b99-4a16-8a4e-e40f45f0599a",
    "indicator--f61e344b-05e0-4a99-97c7-075e455e05e1",
    "indicator--a7c1c6cc-ddb2-4225-9546-26f0bf880c95",
    "indicator--04bcbbf4-d87c-4ba9-9415-11019a7eb609",
    "indicator--24da5537-2c30-499f-8e2f-04b98b0137b8",
    "indicator--553a7161-0202-400a-afbf-9c881a3f4b0c",
    "indicator--006997d1-6793-47ac-a344-8c33a800304b",
    "indicator--fbc3eb6e-0221-400f-bc33-c01d3ed08f4c",
    "indicator--71dfadda-31ab-4959-ad2b-bac0cd743a6f",
    "indicator--75521d78-f72d-427c-8f78-550c74893bf5",
    "indicator--16043a17-6104-4b18-a9a2-c0b5f8e446ef",
    "indicator--d3db2895-9642-4486-8399-f209eca79ac6",
    "indicator--dd29e521-ed2f-40c1-977d-828dd1ca7068",
    "indicator--8b8dd74f-5f38-4074-b206-ce736a9df2ae",
    "indicator--e4d1a2fb-70c4-4e88-b912-083ff0d42c03",
    "indicator--c0c14b69-c20c-4169-a4a2-44ca66da0c37",
    "indicator--149839fd-181d-478f-ace1-644911f0bc59",
    "indicator--78889530-4d79-4770-a2c4-7d2fb9d8c62d",
    "indicator--49e1d637-a30f-42d9-bdf8-2d70916ad732",
    "indicator--4c89bcf3-0db2-488f-b098-ec18bdeb9344",
    "indicator--2e2d4ef0-50ee-4f59-90d7-8543088b4a4e",
    "indicator--fb360168-f7c2-4a5c-bd38-550c9e0790f2",
    "indicator--6fe4d1fa-eb66-4fae-87ee-d196b9a636ea",
    "indicator--036f72d0-c09c-411f-ad81-f1ce8e2f37b8",
    "indicator--e55e3b34-e318-4dd4-8f0e-1f11d6d6f45a",
    "indicator--a88a0c0b-86ee-4d0f-9717-663b7a53662e",
    "indicator--131559dd-0e34-48f9-bc1f-27ec88000b7a",
    "indicator--762c448a-b0bb-4c21-81b6-d1f7caf739bc",
    "indicator--a612f85e-1750-4d6b-8dd7-13365f1603fc",
    "indicator--6dd8e6fe-1a04-43b5-994b-2bf3b5d51cd7",
    "indicator--b3a88ada-d807-4641-991b-42b4116531db",
    "indicator--f45ea740-e4ac-4092-952d-25be4801ed5a",
    "indicator--39a1fabd-89f3-4628-af56-d54496fc98cb",
    "indicator--f2504785-4c21-40bf-9b19-7492015dd3ed",
    "indicator--3ad94578-1f65-45f4-826c-613e3398917e",
    "indicator--ece0fcf6-f0ce-4f1f-8591-97bdede66c73",
    "indicator--8ec47d33-babc-4493-9d27-41093fb0c88c",
    "indicator--a35fc9b0-9ee1-49e2-8620-d62f0442582b",
    "indicator--9e37b449-8d85-48c9-a313-31e63cb96356",
    "indicator--c3a4375b-663b-464b-948a-a2bfd2a46e1f",
    "indicator--7a516926-98e4-4757-8399-598cd6fb3131",
    "indicator--68754fbc-7700-4dd0-b9c6-985b692336e0",
    "indicator--432bcbb7-cce4-4278-8ef9-07031d6b6dc9",
    "indicator--6b087de1-9e7e-42c7-8db4-c6d1cf7423f0",
    "indicator--a8cb7826-1692-41b7-8c57-39cc854a38b7",
    "indicator--9dd8740c-f903-450d-b730-baf1799d07d2",
    "indicator--585ccd4b-67be-471e-9ba9-3375b373d448",
    "indicator--538e8769-1229-4673-baa8-eb9c00bbb0ad",
    "indicator--f3bf5849-fc92-4845-8da5-a2aa4ab8f5b6",
    "indicator--bd999ceb-c332-4a2e-91f8-0d9c4e92db80",
    "indicator--c8917ae3-19a1-4511-a2c9-e7a0269f462e",
    "indicator--e3858900-2d8d-455f-9366-6b0f9395231c",
    "indicator--bc5e1823-23b7-4a50-879b-a621d2a71c10",
    "indicator--4b14612e-a5c4-4771-b10c-c77a53bb00ca",
    "indicator--2ac0806f-60c2-46bf-88e8-716b7d9ae045",
    "indicator--7820d329-5aed-4064-b718-21e4f958ada8",
    "indicator--4482923c-af16-4cdc-ba0b-e3753faecaef",
    "indicator--1d2d4274-5f38-40a8-8e36-2f518cb8d36f",
    "indicator--e7bfccd4-101f-454e-a7bd-1752bee0f6b0",
    "indicator--9d449b38-e0d0-4c20-b689-c33913b3386c",
    "indicator--c802a248-1603-4183-981b-2b1624ab1e4e",
    "indicator--ba2235ee-f663-40f3-8632-d679e5a3a24f",
    "indicator--952bf3de-5998-4f1c-84da-6dbfda07096e",
    "indicator--15d81994-2f95-4fe8-841d-20639b088e72",
    "indicator--ba538639-7f58-4578-8628-c3051b014350",
    "indicator--a2ca2fcc-efdf-4f66-82ff-fc91fd7150d1",
    "indicator--0de1bdd1-4edf-4f4d-9add-dcbb99af3aeb",
    "indicator--e0ecf802-08fb-4cac-a3b5-3f3d4cef241a",
    "indicator--317e4220-eb18-4c48-87d8-aa28d21656a6",
    "indicator--19766250-b93e-4a83-a970-a54cbef6b59e",
    "indicator--018ea473-d6f3-4d2c-bd34-c7a6a5c0a269",
    "indicator--5250be15-9616-44ad-b00a-10ac0ed2804a",
    "indicator--a1297ee6-0464-431c-a646-2c5b28caaed8",
    "indicator--a351f856-c0de-46c9-a5cb-ea47d31210d2",
    "indicator--2c17602a-20af-436b-b7a7-fe574193b19c",
    "indicator--cee877c0-1fc9-46e4-bb35-cadb1c3371e2",
    "indicator--ee7c055e-c4ee-4a27-9994-325faf9aaf4f",
    "indicator--8b0ed11d-2688-4e30-8523-8f73dccf21b3",
    "indicator--f85bae07-2bb6-44ca-afc6-125c80efc8ea",
    "indicator--7f48d788-07e2-478b-a9a0-1845881ef692",
    "indicator--08154d35-89ad-47c4-aa21-b148b540a174",
    "indicator--576183bb-e342-4895-aa66-72900a9ac643",
    "indicator--1b5c9218-8d44-40f7-a741-176ffe54e816",
    "indicator--576e7f31-e5e1-4d0c-a76b-7154dcf528c4",
    "indicator--46ca9be0-5829-40f5-ba4c-fbd66e22e01b",
    "indicator--a2fa104b-99c7-4efe-8520-eb8318a05906"
   ]
  }
 ]
}