{
  "type" : "bundle",
  "id" : "bundle--be2b8bda-dfc9-5bd7-9ed7-9593373eb628",
  "spec_version" : "2.1",
  "objects" : [
    {
      "id" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "contact_information" : "https://any.run",
      "created" : "2016-05-01T00:00:01.000Z",
      "description" : "ANY.RUN Threat Intelligence Feed",
      "identity_class" : "organization",
      "modified" : "2016-05-01T00:00:01.000Z",
      "name" : "ANY.RUN",
      "spec_version" : "2.1",
      "type" : "identity"
    },
    {
      "id" : "indicator--d1099909-94a0-52f9-bf35-3c4b841ae85b",
      "created" : "2025-01-01T01:14:09.000Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "external_references" : [
        {
          "source_name" : "ANY.RUN task 16727370-0954-4983-8828-d7efa357903c",
          "url" : "https://app.any.run/tasks/16727370-0954-4983-8828-d7efa357903c"
        }
      ],
      "labels" : [
        "stealer",
        "redline",
        "malware"
      ],
      "modified" : "2025-01-27T10:29:30.526Z",
      "pattern" : "[ipv4-addr:value = '81.177.6.78']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T01:14:09.000Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--ec634e60-b122-58fe-97db-9bf9769a2f4b",
      "created" : "2025-01-01T01:26:01.000Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "external_references" : [
        {
          "source_name" : "ANY.RUN task 33af1f73-bf6f-45c0-bc78-61ad70903463",
          "url" : "https://app.any.run/tasks/33af1f73-bf6f-45c0-bc78-61ad70903463"
        },
        {
          "source_name" : "ANY.RUN task e59068e6-1ff2-48b6-ae1a-dc41d6ad573e",
          "url" : "https://app.any.run/tasks/e59068e6-1ff2-48b6-ae1a-dc41d6ad573e"
        }
      ],
      "labels" : [
        "malware",
        "rat"
      ],
      "modified" : "2025-01-27T10:29:30.526Z",
      "pattern" : "[ipv4-addr:value = '185.239.51.56']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T01:26:01.000Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--b6a94f69-2cf8-5c9e-a53e-01956fc73978",
      "created" : "2025-01-01T04:56:12.669Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "external_references" : [
        {
          "source_name" : "ANY.RUN task 107e559d-3281-479f-bad6-d3541554b692",
          "url" : "https://app.any.run/tasks/107e559d-3281-479f-bad6-d3541554b692"
        }
      ],
      "labels" : [
        "Quasar"
      ],
      "modified" : "2025-03-24T08:32:52.147Z",
      "pattern" : "[ipv4-addr:value = '193.31.28.181']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T04:56:12.669Z",
      "confidence" : 90
    },
    {
      "id" : "indicator--af2c6f62-0e6c-541d-a255-0bb1dccc28b1",
      "created" : "2025-01-01T00:27:46.000Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "labels" : [
        "malware"
      ],
      "modified" : "2025-01-01T00:27:46.000Z",
      "pattern" : "[url:value = 'http://mkkuei4kdsz.com/391/745.html']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T00:27:46.000Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--a223a019-fd75-5dde-a511-f8ae94c8db3e",
      "created" : "2025-01-01T00:27:56.000Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "labels" : [
        "malware"
      ],
      "modified" : "2025-01-01T00:27:56.000Z",
      "pattern" : "[url:value = 'http://ow5dirasuek.com/941/239.html']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T00:27:56.000Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--c1e94e3c-274c-58a6-9c19-b3b323739018",
      "created" : "2025-01-01T00:29:08.000Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "labels" : [
        "malware"
      ],
      "modified" : "2025-01-01T00:29:08.000Z",
      "pattern" : "[url:value = 'http://mkkuei4kdsz.com/881/612.html']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T00:29:08.000Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--649c4899-aeb6-5e66-86f5-85f530eadb4a",
      "created" : "2025-01-01T00:29:19.000Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "labels" : [
        "malware"
      ],
      "modified" : "2025-01-01T00:29:19.000Z",
      "pattern" : "[url:value = 'http://ow5dirasuek.com/432/106.html']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T00:29:19.000Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--1269cbb3-a65c-5b60-a0f6-71df4b93a761",
      "created" : "2025-01-01T02:53:04.220Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "external_references" : [
        {
          "source_name" : "ANY.RUN task 1222803a-375d-4f56-b997-2a0a2dd8b656",
          "url" : "https://app.any.run/tasks/1222803a-375d-4f56-b997-2a0a2dd8b656"
        }
      ],
      "labels" : [
        "NjRat"
      ],
      "modified" : "2025-03-24T08:32:52.139Z",
      "pattern" : "[domain-name:value = 'times-sig.gl.at.ply.gg']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T02:53:04.220Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--de232a5c-a7a1-5be8-b1c1-b758e66d847a",
      "created" : "2025-01-01T03:04:12.814Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "external_references" : [
        {
          "source_name" : "ANY.RUN task f54a59c4-ea9f-4a6c-ad1c-333da54353fc",
          "url" : "https://app.any.run/tasks/f54a59c4-ea9f-4a6c-ad1c-333da54353fc"
        }
      ],
      "labels" : [
        "NjRat"
      ],
      "modified" : "2025-03-24T08:32:52.142Z",
      "pattern" : "[domain-name:value = 'track-analyze.gl.at.ply.gg']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T03:04:12.814Z",
      "confidence" : 100
    },
    {
      "id" : "indicator--bdddcb03-90b3-597d-92b0-64499bbc7dc8",
      "created" : "2025-01-01T03:21:47.000Z",
      "created_by_ref" : "identity--96a9cd9c-2f73-5ad3-a2ab-c14b3eba65c7",
      "external_references" : [
        {
          "source_name" : "ANY.RUN task d557c7f1-ee29-499f-8297-dec2b6079ccd",
          "url" : "https://app.any.run/tasks/d557c7f1-ee29-499f-8297-dec2b6079ccd"
        },
        {
          "source_name" : "ANY.RUN task c96db8bf-c676-4c99-87b8-d713586e07be",
          "url" : "https://app.any.run/tasks/c96db8bf-c676-4c99-87b8-d713586e07be"
        },
        {
          "source_name" : "ANY.RUN task 8851f6fd-a83e-4179-94e8-d92002cf034c",
          "url" : "https://app.any.run/tasks/8851f6fd-a83e-4179-94e8-d92002cf034c"
        },
        {
          "source_name" : "ANY.RUN task 9bd38de0-9c58-4ff7-a701-3c2d60f336b6",
          "url" : "https://app.any.run/tasks/9bd38de0-9c58-4ff7-a701-3c2d60f336b6"
        }
      ],
      "labels" : [
        "malware",
        "rat"
      ],
      "modified" : "2025-01-27T10:29:30.526Z",
      "pattern" : "[domain-name:value = '891781cm.renyash.ru']",
      "pattern_type" : "stix",
      "revoked" : false,
      "spec_version" : "2.1",
      "type" : "indicator",
      "valid_from" : "2025-01-01T03:21:47.000Z",
      "confidence" : 100
    }
  ]
}